Trojaner-Board - Ärger mit qfind Weiterleitung und dessen Virus

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - Ärger mit qfind Weiterleitung und dessen Virus (https://www.trojaner-board.de/136783-aerger-qfind-weiterleitung-virus.html)

Ärger mit qfind Weiterleitung und dessen Virus

Moin Moin!

Bin neu hier im Forum und hab mich angemeldet, weil ich ein größeres Problem habe und die Hilfe von Experten benötige.
Seit kurzem plagt mich ein Virus, der unter anderem für die Weiterleitung auf die Betrügerseite
"qfind" Schuld ist. Zu dem bremst er merklich das System aus und verursacht gerne auch mal ganze Systemabstürze.
Da ich eigentlich wenig Lust habe mein Windows deswegen platt zu machen, hoffe ich, dass ihr mir helfen könnt.

PS:Wenn ich etwas vergessen haben sollte oder ihr noch irgendwelche Information benötigt,
werde ich diese so schnell wie möglich nachliefern.

Mfg

Hi,

Systemscan mit FRST
Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Start > Computer (Rechtsklick) > Eigenschaften)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Scan.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-06-2013 01

Ran by xXBaseXx (administrator) on 17-06-2013 22:15:24

Running from C:\Users\xXBaseXx\Desktop

Windows 7 Ultimate Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 9

Boot Mode: Normal
 

==================== Processes (Whitelisted) =================
 

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe

() C:\Windows\SysWOW64\PnkBstrA.exe

(EnTech Taiwan) C:\Program Files (x86)\softOSD\softOSD.exe

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

(Microsoft Corporation) C:\Windows\System32\alg.exe

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe

(EnTech Taiwan) C:\Windows\SysWOW64\softLCP.exe

(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
 

==================== Registry (Whitelisted) ==================
 

HKLM\...\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE [x]

HKLM\...\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized [7477016 2013-04-25] (Logitech Inc.)

MountPoints2: {9488151c-1e2d-11df-8422-002421eecdd5} - F:\autorun.exe

MountPoints2: {ba2b95b6-f317-11df-83a7-a2ffbd12294c} - H:\setup.exe

MountPoints2: {fffd9228-f59d-11de-9ed3-806e6f6e6963} - D:\setup.exe

HKLM-x32\...\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry [x]

HKLM-x32\...\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui [4858968 2013-05-09] (AVAST Software)

HKLM-x32\...\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [642656 2013-02-26] (Advanced Micro Devices, Inc.)

Startup: C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk

ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50

BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)

BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll No File

BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} -  No File

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)

BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab

DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab

DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab

Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

Tcpip\..\Interfaces\{61AE6971-47C3-47E4-8E0C-28539E7B6CF9}: [NameServer]8.26.56.26,156.154.70.22

Tcpip\..\Interfaces\{69B94DD0-3985-434A-8453-0D943E2FAA64}: [NameServer]62.109.123.196 213.191.74.18

Tcpip\..\Interfaces\{8BED4635-8D6C-46D0-AB8E-BD1538073031}: [NameServer]8.26.56.26,156.154.70.22
 

FireFox:

========

FF ProfilePath: C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default

FF NetworkProxy: "http", "127.0.0.1"

FF NetworkProxy: "http_port", 5555

FF NetworkProxy: "no_proxies_on", ""

FF NetworkProxy: "type", 4

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll ()

FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF Plugin-x32: @esn.me/esnsonar - C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\Sonar\npesnsonar.dll (ESN AB)

FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File

FF Plugin-x32: @esn.me/esnsonar,version=0.70.3 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.3\npesnsonar.dll No File

FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF Plugin-x32: @esn/esnlaunch - C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\npesnlaunch.dll (ESN AB)

FF Plugin-x32: @esn/esnlaunch,version=1.104.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll No File

FF Plugin-x32: @esn/esnlaunch,version=1.116.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll No File

FF Plugin-x32: @esn/esnlaunch,version=1.122.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll No File

FF Plugin-x32: @esn/esnlaunch,version=1.138.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll No File

FF Plugin-x32: @esn/esnlaunch,version=1.96.0 - C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll No File

FF Plugin-x32: @esn/esnlaunch,version=2.1.3 - C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)

FF Plugin-x32: @java.com/DTPlugin,version=10.4.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.4.1 - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @live.heroesandgenerals.com/npretox - C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)

FF Plugin-x32: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF Plugin-x32: @nexon.net/NxGame - C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)

FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF Extension: Battlefield Play4Free - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\battlefieldplay4free@ea.com

FF Extension: ProxTube - Gesperrte YouTube Videos entsperren - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\ich@maltegoetz.de

FF Extension: HNG downloader/starter (live) - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\npretoxlive@live.heroesandgenerals.com

FF Extension: No Name - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\Strata40@SpewBoy.au

FF Extension: WOT - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

FF Extension: client - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\client@anonymox.net.xpi

FF Extension: jid1-qQSMEVsYTOjgYA - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi

FF Extension: No Name - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

FF Extension: No Name - C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
 

==================== Services (Whitelisted) =================
 

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)

S4 dell_power_nap_service; C:\Program Files (x86)\Dell\PowerNap\PowerNap.Service.exe [11776 2011-02-28] ()

S4 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] ()

S3 npggsvc; C:\Windows\SysWow64\GameMon.des [4303928 2011-04-24] (INCA Internet Co., Ltd.)

R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-04-01] ()

R2 softOSD; C:\Program Files (x86)\softOSD\softOSD.exe [291384 2010-12-18] (EnTech Taiwan)

S4 VhdAttach; C:\Program Files\Josip Medved\VHD Attach\VhdAttachService.exe [263808 2012-06-10] (Josip Medved)

S4 WireHelpSvc; C:\Program Files\Common Files\WireHelpSvc.exe [168864 2012-01-24] ()

S4 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [x]
 

==================== Drivers (Whitelisted) ====================
 

R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)

R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()

R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)

R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)

R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2010-02-15] ()

R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)

R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)

R3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [25528 2012-01-24] (Turtle Entertainment GmbH)

R2 ESLWireAC; C:\Windows\system32\drivers\ESLWireACD.sys [147472 2012-01-24] (<Turtle Entertainment>)

R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)

R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)

R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66800 2013-01-17] (Logitech Inc.)

R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2010-02-15] ()

S3 MSI_MSIBIOS_010507; C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys [33592 2010-05-10] (Your Corporation)

S3 MSI_MSIBIOS_010507; C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys [33592 2010-05-10] (Your Corporation)

S3 NPPTNT2; C:\Windows\SysWow64\npptNT2.sys [4682 2004-12-30] (INCA Internet Co., Ltd.)

S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)

S3 NTIOLib_1_0_4; C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys [14136 2010-10-22] (MSI)

S1 prodrv06; C:\Windows\SysWow64\drivers\prodrv06.sys [79488 2004-05-13] (Protection Technology)

S0 prohlp02; C:\Windows\SysWow64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology)

S0 prosync1; C:\Windows\SysWow64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)

R1 PStrip64; C:\Windows\System32\drivers\pstrip64.sys [13008 2006-09-30] ()

S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2009-12-31] ()

S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2009-12-31] ()

S3 s117bus; C:\Windows\System32\DRIVERS\s117bus.sys [108072 2007-06-25] (MCCI Corporation)

R1 se64a; C:\Windows\System32\Drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)

R1 se64a; C:\Windows\SysWow64\Drivers\se64a.sys [14032 2007-05-03] (EnTech Taiwan)

R0 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [75384 2009-02-03] (Protection Technology (StarForce))

S0 sfhlp01; C:\Windows\SysWow64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)

R0 sfsync04; C:\Windows\System32\drivers\sfsync04.sys [77952 2009-02-03] (Protection Technology (StarForce))

S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-02-12] (Anchorfree Inc.)

S3 ALSysIO; \??\C:\Users\xXBaseXx\AppData\Local\Temp\ALSysIO64.sys [x]

S3 cpuz135; \??\C:\Windows\TEMP\cpuz135\cpuz135_x64.sys [x]

S3 dump_wmimmc; \??\C:\Users\xXBaseXx\Desktop\NewEliteSRO\GameGuard\dump_wmimmc.sys [x]

S3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]

S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [x]

S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [x]

S0 prohlp02; System32\drivers\prohlp02.sys [x]

S0 prosync1; System32\drivers\prosync1.sys [x]

S0 sfhlp01; System32\drivers\sfhlp01.sys [x]

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]

S3 tsusbhub; system32\drivers\tsusbhub.sys [x]

S3 VGPU; System32\drivers\rdvgkmd.sys [x]

U3 kwdyakow; \??\C:\Users\xXBaseXx\AppData\Local\Temp\kwdyakow.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2013-06-17 22:15 - 2013-06-17 22:15 - 00000000 ____D C:\FRST

2013-06-17 22:14 - 2013-06-17 22:14 - 01926844 ____A (Farbar) C:\Users\xXBaseXx\Desktop\FRST64.exe

2013-06-17 22:13 - 2013-06-17 22:14 - 01365333 ____A (Farbar) C:\Users\xXBaseXx\Desktop\FRST.exe

2013-06-17 21:56 - 2013-06-17 21:56 - 00057854 ____A C:\Users\xXBaseXx\Desktop\Logs.rar

2013-06-17 21:44 - 2013-06-17 21:44 - 00338900 ____A C:\Users\xXBaseXx\Desktop\Gmer_logs.log

2013-06-17 17:59 - 2013-06-17 17:59 - 00249176 ____A C:\Users\xXBaseXx\Desktop\Extras.Txt

2013-06-17 17:58 - 2013-06-17 17:58 - 00101500 ____A C:\Users\xXBaseXx\Desktop\OTL.Txt

2013-06-17 17:45 - 2013-06-17 17:45 - 00000478 ____A C:\Users\xXBaseXx\Desktop\defogger_disable.log

2013-06-17 17:45 - 2013-06-17 17:45 - 00000000 ____D C:\Users\xXBaseXx\Desktop\Neuer Ordner (5)

2013-06-17 17:45 - 2013-06-17 17:45 - 00000000 ____A C:\Users\xXBaseXx\defogger_reenable

2013-06-17 17:44 - 2013-06-17 17:44 - 00377856 ____A C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe

2013-06-17 17:43 - 2013-06-17 17:43 - 00602112 ____A (OldTimer Tools) C:\Users\xXBaseXx\Desktop\OTL.exe

2013-06-17 17:41 - 2013-06-17 17:41 - 00050477 ____A C:\Users\xXBaseXx\Desktop\Defogger.exe

2013-06-17 17:39 - 2013-06-17 17:40 - 00007308 ____A C:\Users\xXBaseXx\Desktop\Trojaner board (1).txt

2013-06-16 03:00 - 2013-06-08 16:08 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-16 03:00 - 2013-06-08 16:07 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-16 03:00 - 2013-06-08 16:06 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-16 03:00 - 2013-06-08 16:06 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-16 03:00 - 2013-06-08 16:06 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-16 03:00 - 2013-06-08 14:28 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-16 03:00 - 2013-06-08 13:42 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-16 03:00 - 2013-06-08 13:40 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-16 03:00 - 2013-06-08 13:40 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-16 03:00 - 2013-06-08 13:40 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-16 03:00 - 2013-06-08 13:40 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-16 03:00 - 2013-06-08 13:13 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-06-13 02:59 - 2013-05-17 03:25 - 02877440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2013-06-13 02:59 - 2013-05-17 03:25 - 01767936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2013-06-13 02:59 - 2013-05-17 03:25 - 00690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2013-06-13 02:59 - 2013-05-17 03:25 - 00493056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2013-06-13 02:59 - 2013-05-17 03:25 - 00109056 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll

2013-06-13 02:59 - 2013-05-17 03:25 - 00061440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2013-06-13 02:59 - 2013-05-17 03:25 - 00039424 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2013-06-13 02:59 - 2013-05-17 03:25 - 00033280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2013-06-13 02:59 - 2013-05-17 02:59 - 02241024 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll

2013-06-13 02:59 - 2013-05-17 02:59 - 00051712 ____A (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe

2013-06-13 02:59 - 2013-05-17 02:58 - 03958784 ____A (Microsoft Corporation) C:\Windows\System32\jscript9.dll

2013-06-13 02:59 - 2013-05-17 02:58 - 00855552 ____A (Microsoft Corporation) C:\Windows\System32\jscript.dll

2013-06-13 02:59 - 2013-05-17 02:58 - 00603136 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll

2013-06-13 02:59 - 2013-05-17 02:58 - 00136704 ____A (Microsoft Corporation) C:\Windows\System32\iesysprep.dll

2013-06-13 02:59 - 2013-05-17 02:58 - 00067072 ____A (Microsoft Corporation) C:\Windows\System32\iesetup.dll

2013-06-13 02:59 - 2013-05-17 02:58 - 00053248 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll

2013-06-13 02:59 - 2013-05-17 02:58 - 00039936 ____A (Microsoft Corporation) C:\Windows\System32\iernonce.dll

2013-06-13 02:59 - 2013-05-14 14:23 - 00089600 ____A (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe

2013-06-13 02:59 - 2013-05-14 10:40 - 00071680 ____A (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2013-06-13 00:44 - 2013-05-13 07:51 - 01464320 ____A (Microsoft Corporation) C:\Windows\System32\crypt32.dll

2013-06-13 00:44 - 2013-05-13 07:51 - 00184320 ____A (Microsoft Corporation) C:\Windows\System32\cryptsvc.dll

2013-06-13 00:44 - 2013-05-13 07:51 - 00139776 ____A (Microsoft Corporation) C:\Windows\System32\cryptnet.dll

2013-06-13 00:44 - 2013-05-13 07:50 - 00052224 ____A (Microsoft Corporation) C:\Windows\System32\certenc.dll

2013-06-13 00:44 - 2013-05-13 06:45 - 01160192 ____A (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll

2013-06-13 00:44 - 2013-05-13 06:45 - 00140288 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll

2013-06-13 00:44 - 2013-05-13 06:45 - 00103936 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll

2013-06-13 00:44 - 2013-05-13 05:43 - 01192448 ____A (Microsoft Corporation) C:\Windows\System32\certutil.exe

2013-06-13 00:44 - 2013-05-13 05:08 - 00903168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe

2013-06-13 00:44 - 2013-05-13 05:08 - 00043008 ____A (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll

2013-06-13 00:44 - 2013-05-10 07:49 - 00030720 ____A (Microsoft Corporation) C:\Windows\System32\cryptdlg.dll

2013-06-13 00:44 - 2013-05-10 05:20 - 00024576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll

2013-06-13 00:44 - 2013-05-08 08:39 - 01910632 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys

2013-06-13 00:44 - 2013-04-26 07:51 - 00751104 ____A (Microsoft Corporation) C:\Windows\System32\win32spl.dll

2013-06-13 00:44 - 2013-04-26 06:55 - 00492544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll

2013-06-13 00:44 - 2013-04-17 09:02 - 01230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2013-06-13 00:44 - 2013-04-17 08:24 - 01424384 ____A (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll

2013-06-13 00:43 - 2013-04-26 01:30 - 01505280 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll

2013-06-13 00:43 - 2013-04-01 00:52 - 01887232 ____A (Microsoft Corporation) C:\Windows\System32\d3d11.dll

2013-06-05 20:58 - 2013-06-17 17:02 - 00000000 ___RD C:\Users\xXBaseXx\Dropbox

2013-06-05 20:58 - 2013-06-05 20:59 - 10561781 ____A C:\Users\xXBaseXx\Downloads\Dropbox.zip

2013-06-05 20:54 - 2013-06-17 17:02 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Dropbox

2013-06-05 20:53 - 2013-06-05 20:54 - 32966136 ____A (Dropbox, Inc.) C:\Users\xXBaseXx\Downloads\Dropbox 2.0.26.exe

2013-05-28 19:32 - 2013-05-28 19:32 - 00000000 ____D C:\Users\xXBaseXx\Documents\CPY_SAVES

2013-05-28 19:28 - 2013-05-16 21:24 - 00000000 ____D C:\Users\xXBaseXx\Downloads\Metro.Last.Light.Update.1.0.0.2.READNFO-CPY

2013-05-28 19:08 - 2013-05-28 19:28 - 33779945 ____A C:\Users\xXBaseXx\Downloads\Metro.Last.Light.Update.1.0.0.2.READNFO-CPY.rar

2013-05-28 16:02 - 2013-05-28 16:02 - 00000000 ____D C:\Users\Administrator\Documents\LOLReplay

2013-05-28 16:02 - 2013-05-28 16:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\Logitech

2013-05-27 06:59 - 2013-05-27 07:06 - 22990573 ____A C:\Users\xXBaseXx\Downloads\MSIAfterburnerSetup231.zip

2013-05-25 13:40 - 2013-05-26 18:22 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\FileZilla

2013-05-25 13:40 - 2013-05-25 13:40 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client

2013-05-25 13:39 - 2013-05-25 13:40 - 04811793 ____A (FileZilla Project) C:\Users\xXBaseXx\Downloads\FileZilla_3.7.0.1_win32-setup.exe

2013-05-25 12:17 - 2013-02-15 22:44 - 08043008 ____A (Dxtory Software) C:\Windows\System32\DxtoryCodec.dll

2013-05-24 20:16 - 2013-05-24 20:16 - 04135551 ____A (Dxtory Software                                             ) C:\Users\xXBaseXx\Downloads\DxtorySetup2.0.122.exe

2013-05-22 21:08 - 2013-05-22 21:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-05-22 00:19 - 2013-05-22 00:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2013-05-21 20:18 - 2013-05-21 20:20 - 88790396 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part06.rar.part

2013-05-21 20:12 - 2013-05-21 20:20 - 98400354 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part05.rar.part

2013-05-21 20:11 - 2013-05-21 20:18 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part04.rar

2013-05-21 20:04 - 2013-05-21 20:11 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part03.rar

2013-05-21 20:01 - 2013-05-21 20:12 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part02.rar

2013-05-21 19:55 - 2013-05-21 20:04 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part01.rar

2013-05-21 19:51 - 2013-05-21 20:20 - 483533716 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part27.rar.part

2013-05-21 19:50 - 2013-05-21 20:20 - 516733060 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part26.rar.part

2013-05-21 19:47 - 2013-05-28 19:03 - 422225372 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part25.rar.part

2013-05-21 19:21 - 2013-05-21 19:21 - 00000000 ____D C:\ProgramData\Steam

2013-05-21 18:47 - 2013-05-21 19:21 - 00000000 ____D C:\Program Files (x86)\Resident Evil 6

2013-05-21 18:19 - 2013-05-21 20:01 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part24.rar

2013-05-21 18:13 - 2013-05-21 19:51 - 524288002 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part23.rar

2013-05-21 18:11 - 2013-05-21 19:54 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part22.rar

2013-05-21 18:08 - 2013-05-21 19:50 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part21.rar

2013-05-21 18:07 - 2013-05-21 19:47 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part20.rar

2013-05-21 17:37 - 2013-05-21 18:19 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part19.rar

2013-05-21 17:30 - 2013-05-21 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part18.rar

2013-05-21 17:29 - 2013-05-21 18:11 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part17.rar

2013-05-21 17:27 - 2013-05-21 18:08 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part16.rar

2013-05-21 17:26 - 2013-05-21 18:07 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part15.rar

2013-05-21 16:53 - 2013-05-21 17:36 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part14.rar

2013-05-21 16:51 - 2013-05-21 17:29 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part13.rar

2013-05-21 16:47 - 2013-05-21 17:26 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part12.rar

2013-05-21 16:44 - 2013-05-21 17:29 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part11.rar

2013-05-21 16:43 - 2013-05-21 17:27 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part10.rar

2013-05-21 16:09 - 2013-05-21 16:47 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part09.rar

2013-05-21 16:07 - 2013-05-21 16:50 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part08.rar

2013-05-21 16:06 - 2013-05-21 16:53 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part07.rar

2013-05-21 16:03 - 2013-05-21 16:43 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part06.rar

2013-05-21 14:41 - 2013-05-21 14:56 - 374113450 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part31.rar

2013-05-21 14:26 - 2013-05-21 14:54 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part30.rar

2013-05-21 14:13 - 2013-05-21 14:49 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part29.rar

2013-05-21 14:07 - 2013-05-21 14:52 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part28.rar

2013-05-21 14:05 - 2013-05-21 14:45 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part27.rar

2013-05-21 13:59 - 2013-05-21 14:41 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part26.rar

2013-05-21 13:39 - 2013-05-21 14:25 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part25.rar

2013-05-21 13:29 - 2013-05-21 14:05 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part24.rar

2013-05-21 13:25 - 2013-05-21 14:07 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part23.rar

2013-05-21 13:19 - 2013-05-21 14:13 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part22.rar

2013-05-21 13:16 - 2013-05-21 13:59 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part21.rar

2013-05-21 04:31 - 2013-05-21 13:39 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part20.rar

2013-05-21 04:23 - 2013-05-21 13:28 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part19.rar

2013-05-21 04:13 - 2013-05-21 13:19 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part18.rar

2013-05-21 04:10 - 2013-05-21 13:25 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part17.rar

2013-05-21 04:06 - 2013-05-21 13:16 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part16.rar

2013-05-21 03:43 - 2013-05-21 04:30 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part15.rar

2013-05-21 03:36 - 2013-05-21 04:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part14.rar

2013-05-21 03:32 - 2013-05-21 04:23 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part13.rar

2013-05-21 03:27 - 2013-05-21 04:10 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part12.rar

2013-05-21 03:23 - 2013-05-21 04:06 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part11.rar

2013-05-21 02:52 - 2013-05-21 03:43 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part10.rar

2013-05-21 02:51 - 2013-05-21 03:32 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part09.rar

2013-05-21 02:46 - 2013-05-21 03:27 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part08.rar

2013-05-21 02:45 - 2013-05-21 03:36 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part07.rar

2013-05-21 02:43 - 2013-05-21 03:23 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part06.rar

2013-05-21 02:02 - 2013-05-21 02:52 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part05.rar

2013-05-21 02:02 - 2013-05-21 02:02 - 03385180 ____A C:\Users\xXBaseXx\Downloads\metlas5gilcron13rld.rar

2013-05-21 01:32 - 2013-05-28 19:37 - 00000000 ____D C:\Program Files (x86)\Metro Last Light

2013-05-20 22:12 - 2013-05-21 16:09 - 477226214 ____A C:\Users\xXBaseXx\Downloads\resevi6upd51377tirld.rar

2013-05-20 22:12 - 2013-05-21 02:50 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part01.rar

2013-05-20 22:12 - 2013-05-21 02:46 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part02.rar

2013-05-20 22:12 - 2013-05-21 02:45 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part03.rar

2013-05-20 22:12 - 2013-05-21 02:43 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part04.rar

2013-05-19 13:35 - 2013-05-19 13:35 - 03820336 ____A C:\Users\xXBaseXx\Downloads\battlelog-web-plugins_2.1.3_109.exe

2013-05-18 15:01 - 2013-05-18 15:02 - 00000000 ____D C:\Program Files\Logitech Gaming Software

2013-05-18 15:01 - 2013-05-18 15:01 - 00018960 ____A (Logitech, Inc.) C:\Windows\System32\Drivers\LNonPnP.sys

2013-05-18 15:01 - 2013-05-18 15:01 - 00000388 ____A C:\Windows\LkmdfCoInst.log

2013-05-18 15:01 - 2013-05-18 15:01 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Logitech

2013-05-18 15:01 - 2013-05-18 15:01 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Logishrd

2013-05-18 14:59 - 2013-05-18 15:00 - 52882496 ____A (Logitech Inc.) C:\Users\xXBaseXx\Downloads\lgs846_x64.exe
 

==================== One Month Modified Files and Folders =======
 

2013-06-17 22:15 - 2013-06-17 22:15 - 00000000 ____D C:\FRST

2013-06-17 22:14 - 2013-06-17 22:14 - 01926844 ____A (Farbar) C:\Users\xXBaseXx\Desktop\FRST64.exe

2013-06-17 22:14 - 2013-06-17 22:13 - 01365333 ____A (Farbar) C:\Users\xXBaseXx\Desktop\FRST.exe

2013-06-17 22:02 - 2010-01-04 20:46 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\TS3Client

2013-06-17 21:56 - 2013-06-17 21:56 - 00057854 ____A C:\Users\xXBaseXx\Desktop\Logs.rar

2013-06-17 21:55 - 2012-05-23 14:26 - 00000884 ____A C:\Windows\Tasks\Adobe Flash Player Updater.job

2013-06-17 21:44 - 2013-06-17 21:44 - 00338900 ____A C:\Users\xXBaseXx\Desktop\Gmer_logs.log

2013-06-17 21:00 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing

2013-06-17 17:59 - 2013-06-17 17:59 - 00249176 ____A C:\Users\xXBaseXx\Desktop\Extras.Txt

2013-06-17 17:58 - 2013-06-17 17:58 - 00101500 ____A C:\Users\xXBaseXx\Desktop\OTL.Txt

2013-06-17 17:46 - 2010-01-30 22:06 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner

2013-06-17 17:45 - 2013-06-17 17:45 - 00000478 ____A C:\Users\xXBaseXx\Desktop\defogger_disable.log

2013-06-17 17:45 - 2013-06-17 17:45 - 00000000 ____D C:\Users\xXBaseXx\Desktop\Neuer Ordner (5)

2013-06-17 17:45 - 2013-06-17 17:45 - 00000000 ____A C:\Users\xXBaseXx\defogger_reenable

2013-06-17 17:45 - 2009-12-31 01:57 - 00000000 ____D C:\users\xXBaseXx

2013-06-17 17:44 - 2013-06-17 17:44 - 00377856 ____A C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe

2013-06-17 17:43 - 2013-06-17 17:43 - 00602112 ____A (OldTimer Tools) C:\Users\xXBaseXx\Desktop\OTL.exe

2013-06-17 17:41 - 2013-06-17 17:41 - 00050477 ____A C:\Users\xXBaseXx\Desktop\Defogger.exe

2013-06-17 17:40 - 2013-06-17 17:39 - 00007308 ____A C:\Users\xXBaseXx\Desktop\Trojaner board (1).txt

2013-06-17 17:14 - 2010-04-12 16:04 - 00000000 ____D C:\Windows\pss

2013-06-17 17:05 - 2009-07-14 06:45 - 00017168 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2013-06-17 17:05 - 2009-07-14 06:45 - 00017168 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2013-06-17 17:04 - 2009-12-31 01:56 - 01160578 ____A C:\Windows\WindowsUpdate.log

2013-06-17 17:02 - 2013-06-05 20:58 - 00000000 ___RD C:\Users\xXBaseXx\Dropbox

2013-06-17 17:02 - 2013-06-05 20:54 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Dropbox

2013-06-17 17:01 - 2011-12-30 04:51 - 00000507 ____A C:\Windows\System32\Drivers\etc\hosts.ics

2013-06-17 17:00 - 2012-07-09 13:34 - 00044576 ____A C:\Windows\setupact.log

2013-06-17 17:00 - 2010-09-05 20:27 - 00065536 _____ C:\Windows\System32\Ikeext.etl

2013-06-17 17:00 - 2009-07-14 07:08 - 00000006 ___AH C:\Windows\Tasks\SA.DAT

2013-06-16 20:24 - 2009-12-31 02:17 - 00000000 ____D C:\Program Files (x86)\Steam

2013-06-16 12:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2013-06-15 13:27 - 2010-12-28 23:14 - 00000000 ____D C:\WESTWOOD

2013-06-14 13:12 - 2012-05-23 14:26 - 00692104 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2013-06-14 13:12 - 2011-07-06 12:17 - 00071048 ____A (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2013-06-14 03:04 - 2010-02-20 17:07 - 01622922 ____A C:\Windows\SysWOW64\PerfStringBackup.INI

2013-06-14 03:04 - 2009-07-14 19:58 - 00709210 ____A C:\Windows\System32\perfh007.dat

2013-06-14 03:04 - 2009-07-14 19:58 - 00153562 ____A C:\Windows\System32\perfc007.dat

2013-06-14 03:04 - 2009-07-14 07:13 - 01622922 ____A C:\Windows\System32\PerfStringBackup.INI

2013-06-14 00:24 - 2011-07-22 19:49 - 00000000 ____A C:\Windows\SysWOW64\config.nt

2013-06-13 21:23 - 2009-07-14 07:08 - 00032640 ____A C:\Windows\Tasks\SCHEDLGU.TXT

2013-06-13 02:59 - 2009-12-31 12:37 - 75825640 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe

2013-06-08 16:08 - 2013-06-16 03:00 - 01365504 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll

2013-06-08 16:07 - 2013-06-16 03:00 - 19233792 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll

2013-06-08 16:06 - 2013-06-16 03:00 - 15404544 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll

2013-06-08 16:06 - 2013-06-16 03:00 - 02648064 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll

2013-06-08 16:06 - 2013-06-16 03:00 - 00526336 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll

2013-06-08 14:28 - 2013-06-16 03:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb

2013-06-08 13:42 - 2013-06-16 03:00 - 01141248 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2013-06-08 13:40 - 2013-06-16 03:00 - 14327808 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2013-06-08 13:40 - 2013-06-16 03:00 - 13760512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2013-06-08 13:40 - 2013-06-16 03:00 - 02046976 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2013-06-08 13:40 - 2013-06-16 03:00 - 00391168 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2013-06-08 13:13 - 2013-06-16 03:00 - 02706432 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2013-06-05 20:59 - 2013-06-05 20:58 - 10561781 ____A C:\Users\xXBaseXx\Downloads\Dropbox.zip

2013-06-05 20:54 - 2013-06-05 20:53 - 32966136 ____A (Dropbox, Inc.) C:\Users\xXBaseXx\Downloads\Dropbox 2.0.26.exe

2013-06-04 17:12 - 2012-07-27 17:44 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Skype

2013-05-28 19:37 - 2013-05-21 01:32 - 00000000 ____D C:\Program Files (x86)\Metro Last Light

2013-05-28 19:32 - 2013-05-28 19:32 - 00000000 ____D C:\Users\xXBaseXx\Documents\CPY_SAVES

2013-05-28 19:28 - 2013-05-28 19:08 - 33779945 ____A C:\Users\xXBaseXx\Downloads\Metro.Last.Light.Update.1.0.0.2.READNFO-CPY.rar

2013-05-28 19:15 - 2011-11-26 21:27 - 00000000 ____D C:\Program Files (x86)\JDownloader

2013-05-28 19:03 - 2013-05-21 19:47 - 422225372 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part25.rar.part

2013-05-28 16:02 - 2013-05-28 16:02 - 00000000 ____D C:\Users\Administrator\Documents\LOLReplay

2013-05-28 16:02 - 2013-05-28 16:02 - 00000000 ____D C:\Users\Administrator\AppData\Local\Logitech

2013-05-28 16:02 - 2012-09-02 21:14 - 00000000 ___RD C:\Users\Administrator\Virtual Machines

2013-05-27 17:52 - 2010-08-03 12:35 - 00000000 ____D C:\Users\xXBaseXx\Documents\StarCraft II

2013-05-27 16:45 - 2010-08-03 12:35 - 00000000 ____D C:\Program Files (x86)\StarCraft II

2013-05-27 07:06 - 2013-05-27 06:59 - 22990573 ____A C:\Users\xXBaseXx\Downloads\MSIAfterburnerSetup231.zip

2013-05-26 18:22 - 2013-05-25 13:40 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\FileZilla

2013-05-25 13:40 - 2013-05-25 13:40 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client

2013-05-25 13:40 - 2013-05-25 13:39 - 04811793 ____A (FileZilla Project) C:\Users\xXBaseXx\Downloads\FileZilla_3.7.0.1_win32-setup.exe

2013-05-24 20:16 - 2013-05-24 20:16 - 04135551 ____A (Dxtory Software                                             ) C:\Users\xXBaseXx\Downloads\DxtorySetup2.0.122.exe

2013-05-23 18:31 - 2012-05-03 17:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2013-05-22 21:11 - 2013-05-22 21:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

2013-05-22 00:19 - 2013-05-22 00:19 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2013-05-22 00:12 - 2012-07-13 13:10 - 00440844 ____A C:\Windows\DirectX.log

2013-05-21 20:20 - 2013-05-21 20:18 - 88790396 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part06.rar.part

2013-05-21 20:20 - 2013-05-21 20:12 - 98400354 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part05.rar.part

2013-05-21 20:20 - 2013-05-21 19:51 - 483533716 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part27.rar.part

2013-05-21 20:20 - 2013-05-21 19:50 - 516733060 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part26.rar.part

2013-05-21 20:18 - 2013-05-21 20:11 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part04.rar

2013-05-21 20:12 - 2013-05-21 20:01 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part02.rar

2013-05-21 20:11 - 2013-05-21 20:04 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part03.rar

2013-05-21 20:04 - 2013-05-21 19:55 - 104857602 ____A C:\Users\xXBaseXx\Downloads\13dmcdevmaycryrld.part01.rar

2013-05-21 20:01 - 2013-05-21 18:19 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part24.rar

2013-05-21 19:54 - 2013-05-21 18:11 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part22.rar

2013-05-21 19:51 - 2013-05-21 18:13 - 524288002 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part23.rar

2013-05-21 19:50 - 2013-05-21 18:08 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part21.rar

2013-05-21 19:47 - 2013-05-21 18:07 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part20.rar

2013-05-21 19:21 - 2013-05-21 19:21 - 00000000 ____D C:\ProgramData\Steam

2013-05-21 19:21 - 2013-05-21 18:47 - 00000000 ____D C:\Program Files (x86)\Resident Evil 6

2013-05-21 19:21 - 2010-02-20 21:46 - 00000000 ____D C:\Users\xXBaseXx\Documents\CAPCOM

2013-05-21 18:19 - 2013-05-21 17:37 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part19.rar

2013-05-21 18:13 - 2013-05-21 17:30 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part18.rar

2013-05-21 18:11 - 2013-05-21 17:29 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part17.rar

2013-05-21 18:08 - 2013-05-21 17:27 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part16.rar

2013-05-21 18:07 - 2013-05-21 17:26 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part15.rar

2013-05-21 17:36 - 2013-05-21 16:53 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part14.rar

2013-05-21 17:29 - 2013-05-21 16:51 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part13.rar

2013-05-21 17:29 - 2013-05-21 16:44 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part11.rar

2013-05-21 17:27 - 2013-05-21 16:43 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part10.rar

2013-05-21 17:26 - 2013-05-21 16:47 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part12.rar

2013-05-21 16:53 - 2013-05-21 16:06 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part07.rar

2013-05-21 16:50 - 2013-05-21 16:07 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part08.rar

2013-05-21 16:47 - 2013-05-21 16:09 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part09.rar

2013-05-21 16:44 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part05.rar

2013-05-21 16:43 - 2013-05-21 16:03 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part06.rar

2013-05-21 16:09 - 2013-05-20 22:12 - 477226214 ____A C:\Users\xXBaseXx\Downloads\resevi6upd51377tirld.rar

2013-05-21 16:07 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part03.rar

2013-05-21 16:06 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part01.rar

2013-05-21 16:03 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part04.rar

2013-05-21 16:02 - 2013-03-10 18:13 - 524288000 ____A C:\Users\xXBaseXx\Downloads\13tomragen.part02.rar

2013-05-21 14:56 - 2013-05-21 14:41 - 374113450 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part31.rar

2013-05-21 14:54 - 2013-05-21 14:26 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part30.rar

2013-05-21 14:52 - 2013-05-21 14:07 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part28.rar

2013-05-21 14:49 - 2013-05-21 14:13 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part29.rar

2013-05-21 14:45 - 2013-05-21 14:05 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part27.rar

2013-05-21 14:41 - 2013-05-21 13:59 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part26.rar

2013-05-21 14:25 - 2013-05-21 13:39 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part25.rar

2013-05-21 14:13 - 2013-05-21 13:19 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part22.rar

2013-05-21 14:07 - 2013-05-21 13:25 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part23.rar

2013-05-21 14:05 - 2013-05-21 13:29 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part24.rar

2013-05-21 13:59 - 2013-05-21 13:16 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part21.rar

2013-05-21 13:39 - 2013-05-21 04:31 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part20.rar

2013-05-21 13:28 - 2013-05-21 04:23 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part19.rar

2013-05-21 13:25 - 2013-05-21 04:10 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part17.rar

2013-05-21 13:19 - 2013-05-21 04:13 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part18.rar

2013-05-21 13:16 - 2013-05-21 04:06 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part16.rar

2013-05-21 04:30 - 2013-05-21 03:43 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part15.rar

2013-05-21 04:23 - 2013-05-21 03:32 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part13.rar

2013-05-21 04:12 - 2013-05-21 03:36 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part14.rar

2013-05-21 04:10 - 2013-05-21 03:27 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part12.rar

2013-05-21 04:06 - 2013-05-21 03:23 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part11.rar

2013-05-21 03:43 - 2013-05-21 02:52 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part10.rar

2013-05-21 03:36 - 2013-05-21 02:45 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part07.rar

2013-05-21 03:32 - 2013-05-21 02:51 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part09.rar

2013-05-21 03:27 - 2013-05-21 02:46 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part08.rar

2013-05-21 03:23 - 2013-05-21 02:43 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part06.rar

2013-05-21 02:52 - 2013-05-21 02:02 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part05.rar

2013-05-21 02:50 - 2013-05-20 22:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part01.rar

2013-05-21 02:46 - 2013-05-20 22:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part02.rar

2013-05-21 02:45 - 2013-05-20 22:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part03.rar

2013-05-21 02:43 - 2013-05-20 22:12 - 524288014 ____A C:\Users\xXBaseXx\Downloads\reao1m0dam10dn28anmd912nma.part04.rar

2013-05-21 02:08 - 2010-08-25 20:50 - 00000000 ____D C:\Users\xXBaseXx\Documents\4A Games

2013-05-21 02:02 - 2013-05-21 02:02 - 03385180 ____A C:\Users\xXBaseXx\Downloads\metlas5gilcron13rld.rar

2013-05-21 02:01 - 2010-08-25 20:48 - 00000000 ____D C:\Users\xXBaseXx\AppData\Local\4A Games

2013-05-19 13:38 - 2013-04-01 01:45 - 00291088 ____A C:\Windows\SysWOW64\PnkBstrB.exe

2013-05-19 13:38 - 2013-04-01 01:45 - 00281520 ____A C:\Windows\SysWOW64\PnkBstrB.ex0

2013-05-19 13:38 - 2010-01-02 19:24 - 00291088 ____A C:\Windows\SysWOW64\PnkBstrB.xtr

2013-05-19 13:35 - 2013-05-19 13:35 - 03820336 ____A C:\Users\xXBaseXx\Downloads\battlelog-web-plugins_2.1.3_109.exe

2013-05-19 13:35 - 2011-09-30 08:26 - 00000000 ____D C:\Program Files (x86)\Battlelog Web Plugins

2013-05-18 15:02 - 2013-05-18 15:01 - 00000000 ____D C:\Program Files\Logitech Gaming Software

2013-05-18 15:02 - 2010-01-02 17:25 - 00000000 ____D C:\Users\xXBaseXx\AppData\Local\Logitech

2013-05-18 15:01 - 2013-05-18 15:01 - 00018960 ____A (Logitech, Inc.) C:\Windows\System32\Drivers\LNonPnP.sys

2013-05-18 15:01 - 2013-05-18 15:01 - 00000388 ____A C:\Windows\LkmdfCoInst.log

2013-05-18 15:01 - 2013-05-18 15:01 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Logitech

2013-05-18 15:01 - 2013-05-18 15:01 - 00000000 ____D C:\Users\xXBaseXx\AppData\Roaming\Logishrd

2013-05-18 15:00 - 2013-05-18 14:59 - 52882496 ____A (Logitech Inc.) C:\Users\xXBaseXx\Downloads\lgs846_x64.exe

2013-05-18 13:49 - 2010-09-09 17:22 - 00000000 ____D C:\Users\xXBaseXx\AppData\Local\PMB Files

2013-05-18 13:49 - 2010-09-09 17:22 - 00000000 ____D C:\ProgramData\PMB Files
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2013-06-16 12:49
 

==================== End Of Log ============================

--- --- ---

FRST Additions Logfile:

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-06-2013 01

Ran by xXBaseXx at 2013-06-17 22:18:45 Run:

Running from C:\Users\xXBaseXx\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Installed Programs =======================
 

3DMark06 (Version: 1.2.0)

7-Zip 4.65

Adobe Flash Player 11 ActiveX (Version: 11.4.402.287)

Adobe Flash Player 11 Plugin (Version: 11.7.700.224)

Age of Empires II: HD Edition

AMD Accelerated Video Transcoding (Version: 12.10.100.30226)

AMD APP SDK Runtime (Version: 10.0.1124.2)

AMD Catalyst Install Manager (Version: 8.0.911.0)

AMD Drag and Drop Transcoding (Version: 2.00.0000)

AMD Media Foundation Decoders (Version: 1.0.80226.1352)

Amnesia - The Dark Descent  (Version: 1.2)

ANNO 1404 - Königsedition (Version: 3.10.0000)

applicationupdater

avast! Free Antivirus (Version: 8.0.1489.0)

Battlefield 3™ (Version: 1.0.0.0)

Battlelog Web Plugins (Version: 2.1.3)

Call of Duty(R) - World at War(TM) 1.1 Patch

Call of Duty(R) - World at War(TM) 1.2 Patch

Call of Duty(R) - World at War(TM) 1.4 Patch

Call of Duty(R) - World at War(TM) 1.5 Patch

Call of Duty(R) - World at War(TM) 1.6 Patch

Call of Duty(R) - World at War(TM) 1.7 Patch

Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch

Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch

Catalyst Control Center - Branding (Version: 1.00.0000)

Catalyst Control Center (Version: 2013.0226.1356.24951)

Catalyst Control Center Graphics Previews Common (Version: 2013.0226.1356.24951)

Catalyst Control Center InstallProxy (Version: 2013.0226.1356.24951)

Catalyst Control Center Localization All (Version: 2013.0226.1356.24951)

CCC Help Chinese Standard (Version: 2013.0226.1355.24951)

CCC Help Chinese Traditional (Version: 2013.0226.1355.24951)

CCC Help Czech (Version: 2013.0226.1355.24951)

CCC Help Danish (Version: 2013.0226.1355.24951)

CCC Help Dutch (Version: 2013.0226.1355.24951)

CCC Help English (Version: 2013.0226.1355.24951)

CCC Help Finnish (Version: 2013.0226.1355.24951)

CCC Help French (Version: 2013.0226.1355.24951)

CCC Help German (Version: 2013.0226.1355.24951)

CCC Help Greek (Version: 2013.0226.1355.24951)

CCC Help Hungarian (Version: 2013.0226.1355.24951)

CCC Help Italian (Version: 2013.0226.1355.24951)

CCC Help Japanese (Version: 2013.0226.1355.24951)

CCC Help Korean (Version: 2013.0226.1355.24951)

CCC Help Norwegian (Version: 2013.0226.1355.24951)

CCC Help Polish (Version: 2013.0226.1355.24951)

CCC Help Portuguese (Version: 2013.0226.1355.24951)

CCC Help Russian (Version: 2013.0226.1355.24951)

CCC Help Spanish (Version: 2013.0226.1355.24951)

CCC Help Swedish (Version: 2013.0226.1355.24951)

CCC Help Thai (Version: 2013.0226.1355.24951)

CCC Help Turkish (Version: 2013.0226.1355.24951)

ccc-utility64 (Version: 2013.0226.1356.24951)

CCleaner (Version: 2.28)

Command & Conquer 3 (Version: 1.00.0000)

Command & Conquer Alarmstufe Rot 2

Command & Conquer Gold Edition Stand Alone v1.06c revision 2

Command & Conquer™ Alarmstufe Rot 3 (Version: 1.0.1.0)

Command & Conquer™ Alarmstufe Rot 3 Der Aufstand (Version: 1.0.1.0)

Commandos 2: Men of Courage

Company of Heroes (Version: 1.0.0.99)

Company of Heroes 2 - Beta Stress Test

Company of Heroes: Tales of Valor

ContentMod2.2

Core Temp 1.0 RC2 (Version: 1.0)

Counter-Strike: Source

CPUID CPU-Z 1.58

Creation Kit

Creative ALchemy (Version: 1.41)

Creative Audio-Systemsteuerung (Version: 3.00)

Creative Konsole Starter

Creative Media Toolbox 6 (Shared Components) (Version: 2.80.12)

Creative Media Toolbox 6 (Version: 6.02)

Creative MediaSource 5 (Version: 5.26)

Creative Software AutoUpdate (Version: 1.40)

Creative Sound Blaster Properties x64 Edition

Creative WaveStudio 7 (Version: 7.14)

Creative-Diagnose (Version: 5.11)

Crysis WARHEAD(R)

Crysis WARHEAD(R) (Version: 1.0)

Dark Souls Prepare to Die Edition (Version: 1.0.0000.130)

DH Driver Cleaner Professional Edition (Version: Version 1.5)

Diablo

Diablo II

Diablo III (Version: 1.0.6.13644)

DivX-Setup (Version: 2.6.1.8)

Dokan Library 0.6.0

Dota 2

Dropbox (Version: 2.0.26)

Dxtory version 2.0.122 (Version: 2.0.122)

Eastern Front (Version: 1.7.1.0)

erLT (Version: 1.20.0137)

ESL Wire 1.11.1

ESN Sonar (Version: 0.41.0)

ESN Sonar (Version: 0.70.4)

Explorer Suite III

Fallout 3 - Unofficial Fallout 3 Patch (Version: v1.2.0)

Fallout 3 (Version: 1.00.0000)

Fallout Mod Manager 0.13.21

Fallout New Vegas Ultimate Edition

FileZilla Client 3.7.0.1 (Version: 3.7.0.1)

Filzip 3.06 (Version: 3.0.6)

FLV Player 2.0 (build 25) (Version: 2.0 (build 25))

FOOK2 (Version: v1.0)

Foxit Reader 5.1 (Version: 5.1.4.104)

Free Video Converter V 2.9 (Version: 2.9.0.0)

Free YouTube Download 3 version 3.0.7.718

Free YouTube Download version 3.1.22.319 (Version: 3.1.22.319)

Free YouTube to MP3 Converter version 3.12.2.430 (Version: 3.12.2.430)

Futuremark SystemInfo (Version: 4.11.0)

gamelauncher-ps2-live

Geeks3D.com FurMark 1.10.2

Gemeinsam genutzte Internet-Komponenten von Westwood

Gothic_Patch

Grand Theft Auto IV (Version: 1.0.0011.131)

Grand Theft Auto IV (Version: 1.0.0013.131)

Grand Theft Auto IV (Version: 1.00.0000)

Half-Life

HD Tune 2.55

Heroes & Generals (Version: 1.0.4.4)

HijackThis 2.0.2 (Version: 2.0.2)

Hitman Absolution

Host OpenAL (Version: 1.00)

Java Auto Updater (Version: 2.1.6.0)

Java(TM) 6 Update 22 (Version: 6.0.220)

Java(TM) 6 Update 26 (64-bit) (Version: 6.0.260)

Java(TM) 6 Update 29 (Version: 6.0.290)

Java(TM) 7 Update 4 (Version: 7.0.40)

Java(TM) SE Development Kit 6 Update 26 (64-bit) (Version: 1.6.0.260)

Java(TM) SE Development Kit 6 Update 26 (Version: 1.6.0.260)

JavaFX 2.1.0 (Version: 2.1.0)

JDownloader 0.9 (Version: 0.9)

Kane's Revenge (Version: Demo Version 1.5Alpha)

League of Legends (Version: 1.3)

Live Update 5 (Version: 5.0.084)

Logitech Gaming Software (Version: 8.45.88)

Logitech Gaming Software 8.46 (Version: 8.46.27)

Logitech SetPoint 5.20 (Version: 5.20)

LOLReplay (Version: 0.8.1.4)

Men of War - Assault Squad (Version: 1.96.6)

Metro 2033

Metro Last Light Update 1.0.0.2

Metro: Last Light (c) Deep Silver version 1 (Version: 1)

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 (Version: 1.1.4322)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)

Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319)

Microsoft .NET Framework 4 Extended (Version: 4.0.30319)

Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8107.0)

Microsoft Application Error Reporting (Version: 12.0.6015.5000)

Microsoft Choice Guard (Version: 2.0.48.0)

Microsoft Games for Windows - LIVE Redistributable (Version: 3.5.92.0)

Microsoft Games for Windows Marketplace (Version: 3.5.50.0)

Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (Version: 8.0.50727.4053)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)

Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)

Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)

Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)

Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570)

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (Version: 11.0.51106.1)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (Version: 11.0.51106.1)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (Version: 11.0.51106)

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)

Might & Magic Heroes VI (Version: 1.4)

Mozilla Firefox 21.0 (x86 de) (Version: 21.0)

Mozilla Maintenance Service (Version: 21.0)

MSI Afterburner 2.2.3 (Version: 2.2.3)

MSVCRT (Version: 14.0.1468.721)

MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)

MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)

Natural Selection 2

Nexus Mod Manager (Version: 0.44.11)

NVIDIA Install Application (Version: 2.1002.85.551)

NVIDIA PhysX (Version: 9.10.0222)

Open PLS in Windows Media Player 2.3.0 (Version: 2.3)

OpenOffice.org 3.3 (Version: 3.3.9567)

Origin (Version: 9.1.3.2637)

Pando Media Booster (Version: 2.6.0.8)

Parche Europe At War v6.1.7 Hotfix (Version: 6.1.5)

Path of Exile (Version: 0.9.13.22054)

PCSX2 - Playstation 2 Emulator

PE Builder 3.1.10a

PlanetSide 2 (Version: 1.0.3.181)

PowerNap (Version: 1.3.1)

PowerStrip 3 (remove only)

Questpaket 4 Update 1 Deinstallation (Version: 4.1.0.0)

Rainmeter (Version: 2.3.3 r1522)

Realtek High Definition Audio Driver (Version: 6.0.1.6000)

RESIDENT EVIL 5 (Version: 1.0.0.129)

Resident Evil 6 version 1 (Version: 1)

Risen (Version: 1.00.0000)

RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition (Version: v2.24 MSI Master Overclocking Arena 2009 edition)

Secunia PSI

Skype™ 5.10 (Version: 5.10.116)

Sleeping Dogs™

softOSD Client (Build 1445)

Source SDK Base 2006

SpellForce 2 - Shadow Wars (Version: 1.00.0000)

SpellForce 2 Update v1.02

StarCraft II (Version: 2.0.8.25604)

StarCraft II Beta (Version: 2.0.3.24764)

Steam (Version: 1.0.0.0)

TeamSpeak 3 Client (Version: 3.0.10.1)

The Elder Scrolls V: Skyrim

The Red Alert (Version: 1.1.0.0)

The Walking Dead (c) 3 version 1 (Version: 1)

The Walking Dead Episode 2 - Starved for Help

The Walking Dead Episode 3 (c) TellTale Games version 1 (Version: 1)

The Walking Dead Episode 4 (c) Telltale Games version 1 (Version: 1)

The Walking Dead Episode 5 (c) Telltales version 1 (Version: 1)

Ubisoft Game Launcher (Version: 1.0.0.0)

UltraISO Premium V9.5

Uninstall 1.0.0.1

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)

Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)

Uplay (Version: 2.0)

User's Guides (Version: 1.20.0000)

VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)

VHD Attach 3.40 (Version: 3.40)

VirtualCloneDrive

VLC media player 2.0.2 (Version: 2.0.2)

Warcraft III

Warframe (Version: 1.0.0)

Warhammer® 40,000™: Dawn of War® II – Retribution™

WarhammerÂ® 40,000Â®: Dawn of WarÂ® II â€“ Retributionâ„¢ Beta

Windows Live Call (Version: 14.0.8117.0416)

Windows Live Communications Platform (Version: 14.0.8117.416)

Windows Live Essentials (Version: 14.0.8117.0416)

Windows Live Essentials (Version: 14.0.8117.416)

Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)

Windows Live Messenger (Version: 14.0.8117.0416)

Windows Live-Uploadtool (Version: 14.0.8014.1029)

Windows XP Mode (Version: 1.3.7600.16422)

WinRAR

WORLD IN CONFLICT: SOVIET ASSAULT (Version: 1.0.1.0)

World of Tanks - Common Test

World of Tanks v.0.7.3

Wrye Bash (Version: 0.2.9.9)

Xiph.Org Open Codecs 0.85.17777 (Version: 0.85.17777)
 

==================== Restore Points  =========================
 

01-06-2013 18:42:42 Geplanter Prüfpunkt

03-06-2013 15:39:18 DirectX wurde installiert

10-06-2013 19:18:43 Geplanter Prüfpunkt

13-06-2013 00:57:58 Windows Update

14-06-2013 01:00:18 Windows Update

16-06-2013 01:00:18 Windows Update
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {153F2FF5-772B-4581-998F-F444E560A041} - System32\Tasks\Microsoft\Windows Defender\MpIdleTask => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)

Task: {1DABA4F8-8D6A-4045-A583-31D9334B388D} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-10] (Microsoft Corporation)

Task: {1E9B3054-7FFC-4E2A-A647-52015249170A} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => C:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)

Task: {647E6E8A-B6A2-4EC6-B720-E5A50D2DB2CC} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline => C:\Windows\system32\schtasks.exe [2010-11-20] (Microsoft Corporation)

Task: {7ABD849C-2E78-4DFE-874F-730A6741CBAD} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2012-07-24] ()

Task: {81540B9F-B5BF-47EB-9C95-BE195BF2C664} - System32\Tasks\Microsoft\Windows\NetTrace\GatherNetworkInfo => C:\Windows\system32\gatherNetworkInfo.vbs [2009-06-10] ()

Task: {ACE9C954-A86D-4CA3-806B-2767334C061F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-14] (Adobe Systems Incorporated)

Task: {ACF55478-64F0-4DAA-82BD-22E87EFE00EA} - System32\Tasks\{85EE5424-B56D-4DF3-A72D-0D33A5D34137} => C:\program files (x86)\mozilla firefox\firefox.exe [2013-05-22] (Mozilla Corporation)

Task: {B72340D3-EE38-4C1E-A90C-889F472F3833} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-05-09] (AVAST Software)

Task: {C78E010B-8EF4-4558-B46B-F3F1BB4B5AE8} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2428822915-2084229183-1607689295-1000 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
 

==================== Faulty Device Manager Devices =============
 

Name: Realtek High Definition Audio

Description: Realtek High Definition Audio

Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}

Manufacturer: Realtek

Service: IntcAzAudAddService

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (06/17/2013 06:19:28 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0

Name des fehlerhaften Moduls: gmer_2.1.19163.exe, Version: 2.1.19163.0, Zeitstempel: 0x515d31f0

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000218a

ID des fehlerhaften Prozesses: 0xff4

Startzeit der fehlerhaften Anwendung: 0xgmer_2.1.19163.exe0

Pfad der fehlerhaften Anwendung: gmer_2.1.19163.exe1

Pfad des fehlerhaften Moduls: gmer_2.1.19163.exe2

Berichtskennung: gmer_2.1.19163.exe3
 

Error: (06/16/2013 01:07:40 PM) (Source: RasClient) (User: )

Description: CoID={F4C1F27F-9ED6-404C-97DE-000E4CAFEE6F}: Der Benutzer "SYSTEM" hat eine Verbindung mit dem Namen "Breitbandverbindung 3" gewählt, die Verbindung konnte jedoch nicht hergestellt werden. Der durch den Fehler zurückgegebene Ursachencode lautet: 691.
 

Error: (06/15/2013 02:38:47 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a

Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4

Ausnahmecode: 0xc0000417

Fehleroffset: 0x0000f66b

ID des fehlerhaften Prozesses: 0x1608

Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0

Pfad der fehlerhaften Anwendung: LolClient.exe1

Pfad des fehlerhaften Moduls: LolClient.exe2

Berichtskennung: LolClient.exe3
 

Error: (06/15/2013 00:35:55 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a

Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4

Ausnahmecode: 0xc0000417

Fehleroffset: 0x0000f66b

ID des fehlerhaften Prozesses: 0xc20

Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0

Pfad der fehlerhaften Anwendung: LolClient.exe1

Pfad des fehlerhaften Moduls: LolClient.exe2

Berichtskennung: LolClient.exe3
 

Error: (06/15/2013 03:09:11 AM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a

Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00002e72

ID des fehlerhaften Prozesses: 0x2324

Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0

Pfad der fehlerhaften Anwendung: LolClient.exe1

Pfad des fehlerhaften Moduls: LolClient.exe2

Berichtskennung: LolClient.exe3
 

Error: (06/14/2013 05:15:05 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a

Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4

Ausnahmecode: 0xc0000005

Fehleroffset: 0x00002e72

ID des fehlerhaften Prozesses: 0x13b4

Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0

Pfad der fehlerhaften Anwendung: LolClient.exe1

Pfad des fehlerhaften Moduls: LolClient.exe2

Berichtskennung: LolClient.exe3
 

Error: (06/14/2013 02:06:27 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a

Name des fehlerhaften Moduls: Air.dll, Version: 0.0.0.0, Zeitstempel: 0x511c7eb4

Ausnahmecode: 0xc0000417

Fehleroffset: 0x0000f66b

ID des fehlerhaften Prozesses: 0xe2c

Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0

Pfad der fehlerhaften Anwendung: LolClient.exe1

Pfad des fehlerhaften Moduls: LolClient.exe2

Berichtskennung: LolClient.exe3
 

Error: (06/13/2013 09:25:12 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: LolClient.exe, Version: 2.0.2.12610, Zeitstempel: 0x4c00573a

Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725, Zeitstempel: 0x4ec49b8f

Ausnahmecode: 0x80000003

Fehleroffset: 0x0005801d

ID des fehlerhaften Prozesses: 0x1410

Startzeit der fehlerhaften Anwendung: 0xLolClient.exe0

Pfad der fehlerhaften Anwendung: LolClient.exe1

Pfad des fehlerhaften Moduls: LolClient.exe2

Berichtskennung: LolClient.exe3
 

Error: (06/13/2013 09:23:01 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: svchost.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc3c1

Name des fehlerhaften Moduls: ipnathlp.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bdf5d

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000023e6a

ID des fehlerhaften Prozesses: 0x2f8

Startzeit der fehlerhaften Anwendung: 0xsvchost.exe0

Pfad der fehlerhaften Anwendung: svchost.exe1

Pfad des fehlerhaften Moduls: svchost.exe2

Berichtskennung: svchost.exe3
 

Error: (06/13/2013 05:21:33 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac

Name des fehlerhaften Moduls: rads_user_kernel.exe, Version: 0.0.0.0, Zeitstempel: 0x4e65c1ac

Ausnahmecode: 0xc0000005

Fehleroffset: 0x000b8554

ID des fehlerhaften Prozesses: 0x1aa0

Startzeit der fehlerhaften Anwendung: 0xrads_user_kernel.exe0

Pfad der fehlerhaften Anwendung: rads_user_kernel.exe1

Pfad des fehlerhaften Moduls: rads_user_kernel.exe2

Berichtskennung: rads_user_kernel.exe3
 
 

System errors:

=============

Error: (06/17/2013 09:45:43 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (06/17/2013 09:42:06 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (06/17/2013 09:39:54 PM) (Source: ipnathlp) (User: )

Description: 
 

Error: (06/17/2013 06:22:54 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (06/17/2013 06:19:54 PM) (Source: ipnathlp) (User: )

Description: 
 

Error: (06/17/2013 06:14:54 PM) (Source: ipnathlp) (User: )

Description: 0
 

Error: (06/17/2013 05:50:46 PM) (Source: Disk) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (06/17/2013 05:50:42 PM) (Source: Disk) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (06/17/2013 05:50:39 PM) (Source: Disk) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (06/17/2013 05:48:58 PM) (Source: Disk) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 
 

Microsoft Office Sessions:

=========================

Error: (06/17/2013 06:19:28 PM) (Source: Application Error)(User: )

Description: gmer_2.1.19163.exe2.1.19163.0515d31f0gmer_2.1.19163.exe2.1.19163.0515d31f0c00000050000218aff401ce6b75e1115dd1C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exeC:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exeaecc65c2-d769-11e2-a947-00ff01000001
 

Error: (06/16/2013 01:07:40 PM) (Source: RasClient)(User: )

Description: {F4C1F27F-9ED6-404C-97DE-000E4CAFEE6F}SYSTEMBreitbandverbindung 3691
 

Error: (06/15/2013 02:38:47 PM) (Source: Application Error)(User: )

Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c00004170000f66b160801ce69be44bef5d7C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dll8539a94b-d5b8-11e2-99d4-00ff01000001
 

Error: (06/15/2013 00:35:55 PM) (Source: Application Error)(User: )

Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c00004170000f66bc2001ce69a9afed1b90C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dll5b3edbe4-d5a7-11e2-99d4-00ff01000001
 

Error: (06/15/2013 03:09:11 AM) (Source: Application Error)(User: )

Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c000000500002e72232401ce693c834f8420C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dll2f38cbe4-d558-11e2-ae35-00ff01000001
 

Error: (06/14/2013 05:15:05 PM) (Source: Application Error)(User: )

Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c000000500002e7213b401ce690d671086d6C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dll308983ee-d505-11e2-ae35-00ff01000001
 

Error: (06/14/2013 02:06:27 PM) (Source: Application Error)(User: )

Description: LolClient.exe2.0.2.126104c00573aAir.dll0.0.0.0511c7eb4c00004170000f66be2c01ce68f021008767C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.29\deploy\LolClient.exeC:\Program Files (x86)\LOLReplay\Air.dlld6929ade-d4ea-11e2-ae35-00ff01000001
 

Error: (06/13/2013 09:25:12 PM) (Source: Application Error)(User: )

Description: LolClient.exe2.0.2.126104c00573antdll.dll6.1.7601.177254ec49b8f800000030005801d141001ce6867c3b72481C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.28\deploy\LolClient.exeC:\Windows\SysWOW64\ntdll.dllf7000a30-d45e-11e2-9891-00ff01000001
 

Error: (06/13/2013 09:23:01 PM) (Source: Application Error)(User: )

Description: svchost.exe6.1.7600.163854a5bc3c1ipnathlp.dll6.1.7600.163854a5bdf5dc00000050000000000023e6a2f801ce681eccc78c49C:\Windows\system32\svchost.exec:\windows\system32\ipnathlp.dlla8ef3940-d45e-11e2-9891-00ff01000001
 

Error: (06/13/2013 05:21:33 PM) (Source: Application Error)(User: )

Description: rads_user_kernel.exe0.0.0.04e65c1acrads_user_kernel.exe0.0.0.04e65c1acc0000005000b85541aa001ce6849a7e4aea8C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeC:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exeed655659-d43c-11e2-9891-00ff01000001
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 36%

Total physical RAM: 8183.12 MB

Available physical RAM: 5215.12 MB

Total Pagefile: 16364.42 MB

Available Pagefile: 13084.61 MB

Total Virtual: 8192 MB

Available Virtual: 8191.83 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:931.41 GB) (Free:230.72 GB) NTFS (Disk=0 Partition=2)
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 792134FC)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Hier sind die geforderten logs
und schon mal danke für die Antwort.

Soll ich die anderen Logs auch noch einfügen?

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches OTL log bitte.

Hier das Adwcleaner log:

Code:

# AdwCleaner v2.303 - Datei am 18/06/2013 um 08:18:25 erstellt

# Aktualisiert am 08/06/2013 von Xplode

# Betriebssystem : Windows 7 Ultimate Service Pack 1 (64 bits)

# Benutzer : xXBaseXx - XXBASEXX-PC

# Bootmodus : Normal

# Ausgeführt unter : C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe

# Option [Löschen]
 
 

**** [Dienste] ****
 
 

***** [Dateien / Ordner] *****
 

Datei Gelöscht : C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\foxydeal.sqlite

Ordner Gelöscht : C:\Users\xXBaseXx\AppData\LocalLow\boost_interprocess

Ordner Gelöscht : C:\Users\xXBaseXx\AppData\Roaming\dvdvideosoftiehelpers

Ordner Gelöscht : C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\jetpack

Ordner Gelöscht : C:\Users\xXBaseXx\AppData\Roaming\OpenCandy
 

***** [Registrierungsdatenbank] *****
 

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Schlüssel Gelöscht : HKCU\Software\Softonic

Schlüssel Gelöscht : HKCU\Software\YahooPartnerToolbar

Schlüssel Gelöscht : HKLM\Software\Freeze.com

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
 

***** [Internet Browser] *****
 

-\\ Internet Explorer v10.0.9200.16611
 

[OK] Die Registrierungsdatenbank ist sauber.
 

-\\ Mozilla Firefox v21.0 (de)
 

Datei : C:\Users\xXBaseXx\AppData\Roaming\Mozilla\Firefox\Profiles\kp8852w0.default\prefs.js
 

Gelöscht : user_pref("extensions.foxlingo.addit.defaultAddons", "{ \"software\": {\"13\": {\"id\": \"13\",\"tit[...]
 

-\\ Opera v [Version kann nicht ermittelt werden]
 

Datei : C:\Users\xXBaseXx\AppData\Roaming\Opera\Opera\operaprefs.ini
 

[OK] Die Datei ist sauber.
 

*************************
 

AdwCleaner[S1].txt - [2185 octets] - [18/06/2013 08:18:25]
 

########## EOF - C:\AdwCleaner[S1].txt - [2245 octets] ##########

und das frische OTL log:

Code:

OTL logfile created on: 18.06.2013 08:55:32 - Run 2

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\xXBaseXx\Desktop

64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16614)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

7,99 Gb Total Physical Memory | 6,47 Gb Available Physical Memory | 80,98% Memory free

15,98 Gb Paging File | 14,28 Gb Available in Paging File | 89,33% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 931,41 Gb Total Space | 230,75 Gb Free Space | 24,77% Space Free | Partition Type: NTFS

 

Computer Name: XXBASEXX-PC | User Name: xXBaseXx | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2013.06.17 17:43:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe

PRC - [2013.05.09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe

PRC - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe

PRC - [2013.04.01 01:44:47 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe

PRC - [2010.12.18 18:56:48 | 000,095,272 | ---- | M] (EnTech Taiwan) -- C:\Windows\SysWOW64\softLCP.exe

PRC - [2010.12.18 18:56:34 | 000,291,384 | ---- | M] (EnTech Taiwan) -- C:\Program Files (x86)\softOSD\softOSD.exe

PRC - [2009.02.23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2009.08.26 06:29:28 | 000,150,016 | ---- | M] () -- C:\Windows\SysWOW64\OemSpiE.dll

MOD - [2009.03.26 15:46:42 | 000,148,480 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL

MOD - [2009.02.06 19:52:24 | 000,073,728 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2013.02.26 20:24:44 | 000,240,640 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV - [2013.06.14 13:12:34 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2013.06.07 00:06:24 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2013.05.22 21:11:31 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)

SRV - [2013.04.01 01:44:47 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)

SRV - [2012.08.10 12:42:54 | 000,150,464 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)

SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2012.06.10 02:14:06 | 000,263,808 | ---- | M] (Josip Medved) [Disabled | Stopped] -- C:\Programme\Josip Medved\VHD Attach\VhdAttachService.exe -- (VhdAttach)

SRV - [2012.01.24 13:50:46 | 000,168,864 | ---- | M] () [Disabled | Stopped] -- C:\Programme\Common Files\WireHelpSvc.exe -- (WireHelpSvc)

SRV - [2011.12.08 18:21:47 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\MT6Licensing.exe -- (Creative Media Toolbox 6 Licensing Service)

SRV - [2011.12.08 18:17:48 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)

SRV - [2011.09.07 16:29:20 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)

SRV - [2011.04.24 23:08:00 | 004,303,928 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)

SRV - [2011.02.28 10:16:38 | 000,011,776 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Dell\PowerNap\PowerNap.Service.exe -- (dell_power_nap_service)

SRV - [2011.01.10 14:49:20 | 000,014,848 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe -- (DokanMounter)

SRV - [2010.12.18 18:56:34 | 000,291,384 | ---- | M] (EnTech Taiwan) [Auto | Running] -- C:\Program Files (x86)\softOSD\softOSD.exe -- (softOSD)

SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009.08.18 13:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)

SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009.02.23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2013.05.09 10:59:07 | 001,025,808 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)

DRV:64bit: - [2013.05.09 10:59:07 | 000,378,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)

DRV:64bit: - [2013.05.09 10:59:07 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)

DRV:64bit: - [2013.05.09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)

DRV:64bit: - [2013.05.09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)

DRV:64bit: - [2013.05.09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)

DRV:64bit: - [2013.05.09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)

DRV:64bit: - [2013.05.09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV:64bit: - [2013.02.26 21:17:50 | 011,613,184 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2013.02.26 19:58:04 | 000,576,000 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2013.02.12 23:01:36 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)

DRV:64bit: - [2013.01.17 21:15:12 | 000,066,800 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt)

DRV:64bit: - [2013.01.15 12:11:26 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)

DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2012.01.24 14:50:38 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ESLvnic.sys -- (ESLvnic1)

DRV:64bit: - [2012.01.24 13:50:38 | 000,147,472 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ESLWireACD.sys -- (ESLWireAC)

DRV:64bit: - [2011.07.26 19:49:12 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)

DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2011.01.15 18:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)

DRV:64bit: - [2011.01.10 14:51:40 | 000,120,408 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\dokan.sys -- (Dokan)

DRV:64bit: - [2010.12.17 00:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)

DRV:64bit: - [2010.11.20 15:34:04 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)

DRV:64bit: - [2010.11.20 15:34:04 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)

DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.20 13:35:34 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)

DRV:64bit: - [2010.11.20 13:35:22 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)

DRV:64bit: - [2010.05.28 13:04:52 | 000,017,456 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)

DRV:64bit: - [2010.03.04 13:43:00 | 000,346,144 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2010.02.15 23:21:32 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)

DRV:64bit: - [2010.02.15 23:21:31 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)

DRV:64bit: - [2009.11.24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)

DRV:64bit: - [2009.11.24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)

DRV:64bit: - [2009.11.18 08:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)

DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.06.17 09:54:46 | 000,040,976 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)

DRV:64bit: - [2009.06.17 09:54:30 | 000,057,872 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)

DRV:64bit: - [2009.06.17 09:54:22 | 000,055,312 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)

DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.05.06 03:34:52 | 000,639,512 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\t3.sys -- (t3)

DRV:64bit: - [2009.02.03 17:46:14 | 000,077,952 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfsync04.sys -- (sfsync04)

DRV:64bit: - [2009.02.03 17:37:50 | 000,075,384 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01)

DRV:64bit: - [2007.06.25 10:42:22 | 000,108,072 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s117bus.sys -- (s117bus)

DRV:64bit: - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\se64a.sys -- (se64a)

DRV:64bit: - [2006.09.30 11:36:14 | 000,013,008 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pstrip64.sys -- (PStrip64)

DRV:64bit: - [2006.06.14 16:58:10 | 000,014,192 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02)

DRV - [2010.10.22 10:37:36 | 000,014,136 | ---- | M] (MSI) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys -- (NTIOLib_1_0_4)

DRV - [2010.05.10 10:44:40 | 000,033,592 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys -- (MSI_MSIBIOS_010507)

DRV - [2010.01.29 11:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)

DRV - [2009.12.31 14:00:46 | 000,019,952 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys -- (RivaTuner64)

DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

DRV - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\se64a.sys -- (se64a)

DRV - [2004.12.30 23:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)

DRV - [2004.05.13 15:00:04 | 000,111,808 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prohlp02.sys -- (prohlp02)

DRV - [2004.05.13 13:19:36 | 000,079,488 | ---- | M] (Protection Technology) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\prodrv06.sys -- (prodrv06)

DRV - [2003.12.01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\sfhlp01.sys -- (sfhlp01)

DRV - [2003.09.06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prosync1.sys -- (prosync1)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = 

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9C C2 45 B4 AA D0 CC 01  [binary data]

IE - HKCU\..\SearchScopes,DefaultScope = 

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledAddons: npretoxlive%40live.heroesandgenerals.com:1.0.3.5

FF - prefs.js..extensions.enabledAddons: client%40anonymox.net:1.0.2

FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20130515

FF - prefs.js..extensions.enabledAddons: %7B73a6fe31-595d-460b-a920-fcc0f8843232%7D:2.6.6.2

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3

FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.8

FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908

FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20

FF - prefs.js..extensions.enabledItems: Strata40@SpewBoy.au:0.6.2

FF - prefs.js..network.proxy.http: "127.0.0.1"

FF - prefs.js..network.proxy.http_port: 5555

FF - prefs.js..network.proxy.no_proxies_on: ""

FF - prefs.js..network.proxy.type: 4

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar: C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\Sonar\npesnsonar.dll (ESN AB)

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.0: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.3: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.3\npesnsonar.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch: C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\npesnlaunch.dll (ESN AB)

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.104.0: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.116.0: C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.138.0: C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.96.0: C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.3: C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@live.heroesandgenerals.com/npretox: C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)

FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)

FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.12.30 06:25:00 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.06.14 00:24:04 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.05.22 21:09:41 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.05.22 21:09:41 | 000,000,000 | ---D | M]

 

[2009.12.31 02:00:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Extensions

[2013.05.31 20:11:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions

[2013.05.17 07:42:10 | 000,000,000 | ---D | M] (WOT) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

[2011.03.15 14:19:35 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\battlefieldplay4free@ea.com

[2013.04.06 14:11:20 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\ich@maltegoetz.de

[2012.07.27 22:38:34 | 000,000,000 | ---D | M] (HNG downloader/starter (live)) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\npretoxlive@live.heroesandgenerals.com

[2010.04.21 20:38:39 | 000,000,000 | ---D | M] ("Strata40") -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au

[2010.04.21 20:38:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\extensions

[2013.05.07 20:07:51 | 000,363,920 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\client@anonymox.net.xpi

[2013.05.31 20:11:34 | 000,699,920 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi

[2013.05.26 11:32:06 | 000,534,261 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

[2013.05.08 20:07:53 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

[2010.01.08 15:22:24 | 000,001,580 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\xpinstall\xpinstallConfirm.css

[2010.01.09 03:58:54 | 000,001,423 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\xpinstall\xpinstallItemGeneric.png

[2013.05.22 21:11:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions

[2013.05.22 21:11:32 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[2011.11.06 13:40:16 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll

 

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)

O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE File not found

O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)

O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry File not found

O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found

O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found

O8 - Extra context menu item: Free YouTube Download - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found

O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)

O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)

O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)

O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)

O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16:64bit: - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)

O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)

O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)

O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Creative Software AutoUpdate 2)

O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab (Creative Software AutoUpdate Support Package)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{61AE6971-47C3-47E4-8E0C-28539E7B6CF9}: NameServer = 8.26.56.26,156.154.70.22

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8BED4635-8D6C-46D0-AB8E-BD1538073031}: NameServer = 8.26.56.26,156.154.70.22

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) -  File not found

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found

O20 - HKLM Winlogon: Shell - (explorer.exe) -  File not found

O20 - HKLM Winlogon: UserInit - (userinit.exe) -  File not found

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O22:64bit: - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)

O29:64bit: - HKLM SecurityProviders - (credssp.dll) -  File not found

O29 - HKLM SecurityProviders - (credssp.dll) -  File not found

O32 - HKLM CDRom: AutoRun - 1

O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell - "" = AutoRun

O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell\AutoRun\command - "" = F:\autorun.exe

O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell\setup\command - "" = F:\setup.exe

O33 - MountPoints2\{ba2b95b6-f317-11df-83a7-a2ffbd12294c}\Shell - "" = AutoRun

O33 - MountPoints2\{ba2b95b6-f317-11df-83a7-a2ffbd12294c}\Shell\AutoRun\command - "" = H:\setup.exe

O33 - MountPoints2\{fffd9228-f59d-11de-9ed3-806e6f6e6963}\Shell - "" = AutoRun

O33 - MountPoints2\{fffd9228-f59d-11de-9ed3-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013.06.18 08:53:18 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\JRT

[2013.06.18 08:52:09 | 000,545,954 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\xXBaseXx\Desktop\JRT.exe

[2013.06.18 08:27:47 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\temp

[2013.06.18 08:27:47 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\erunt

[2013.06.18 08:23:01 | 000,000,000 | ---D | C] -- C:\JRT

[2013.06.17 22:15:11 | 000,000,000 | ---D | C] -- C:\FRST

[2013.06.17 22:14:48 | 001,926,844 | ---- | C] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST64.exe

[2013.06.17 22:13:57 | 001,365,333 | ---- | C] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST.exe

[2013.06.17 17:45:28 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\Neuer Ordner (5)

[2013.06.17 17:43:01 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe

[2013.06.05 20:58:28 | 000,000,000 | R--D | C] -- C:\Users\xXBaseXx\Dropbox

[2013.06.05 20:57:22 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

[2013.06.05 20:54:56 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Dropbox

[2013.05.28 19:32:33 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Documents\CPY_SAVES

[2013.05.27 16:23:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II

[2013.05.25 13:40:53 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\FileZilla

[2013.05.25 13:40:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

[2013.05.25 13:40:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client

[2013.05.25 12:17:39 | 008,043,008 | ---- | C] (Dxtory Software) -- C:\Windows\SysNative\DxtoryCodec.dll

[2013.05.22 21:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox

[2013.05.22 00:19:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation

[2013.05.21 19:21:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam

[2013.05.21 18:47:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Resident Evil 6

[2013.05.21 01:32:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Metro Last Light

[9 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2013.06.18 08:55:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2013.06.18 08:52:10 | 000,545,954 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\xXBaseXx\Desktop\JRT.exe

[2013.06.18 08:40:24 | 000,017,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013.06.18 08:40:24 | 000,017,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013.06.18 08:35:02 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl

[2013.06.18 08:34:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013.06.18 08:34:50 | 2140,495,871 | -HS- | M] () -- C:\hiberfil.sys

[2013.06.18 08:17:37 | 000,648,201 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe

[2013.06.17 22:14:59 | 001,926,844 | ---- | M] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST64.exe

[2013.06.17 22:14:04 | 001,365,333 | ---- | M] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST.exe

[2013.06.17 21:56:22 | 000,057,854 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\Logs.rar

[2013.06.17 17:45:17 | 000,000,000 | ---- | M] () -- C:\Users\xXBaseXx\defogger_reenable

[2013.06.17 17:44:34 | 000,377,856 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe

[2013.06.17 17:43:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe

[2013.06.17 17:41:22 | 000,050,477 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\Defogger.exe

[2013.06.14 03:04:41 | 001,622,922 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2013.06.14 03:04:41 | 000,709,210 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2013.06.14 03:04:41 | 000,661,492 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013.06.14 03:04:41 | 000,153,562 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2013.06.14 03:04:41 | 000,125,682 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013.06.14 03:04:33 | 001,622,922 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013.06.14 00:24:05 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt

[2013.05.19 13:38:58 | 000,291,088 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr

[2013.05.19 13:38:58 | 000,291,088 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe

[2013.05.19 13:38:30 | 000,281,520 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0

[9 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2013.06.18 08:17:37 | 000,648,201 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe

[2013.06.17 21:56:22 | 000,057,854 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\Logs.rar

[2013.06.17 17:45:17 | 000,000,000 | ---- | C] () -- C:\Users\xXBaseXx\defogger_reenable

[2013.06.17 17:44:34 | 000,377,856 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe

[2013.06.17 17:41:22 | 000,050,477 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\Defogger.exe

[2013.05.21 19:17:24 | 000,000,828 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Resident Evil 6.lnk

[2013.05.21 01:48:26 | 000,000,856 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metro Last Light.lnk

[2013.04.01 01:45:13 | 000,291,088 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe

[2013.04.01 01:44:47 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe

[2013.03.27 21:11:29 | 000,015,522 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bk!

[2013.03.27 21:11:19 | 000,001,886 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bko

[2013.03.11 18:40:25 | 000,015,739 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bak

[2013.03.11 18:33:36 | 000,015,741 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.ini

[2013.02.26 20:25:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat

[2013.02.26 20:25:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat

[2013.01.18 21:43:53 | 000,037,999 | ---- | C] () -- C:\Windows\DIIUnin.dat

[2012.11.27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll

[2012.11.19 22:00:00 | 003,123,272 | R--- | C] () -- C:\Windows\SysWow64\pbsvc.exe

[2012.10.07 00:18:46 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini

[2012.10.06 16:02:55 | 000,877,747 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Local\Tempmusic.ogg

[2012.09.15 11:31:48 | 000,000,061 | ---- | C] () -- C:\Windows\sbwin.ini

[2012.09.14 21:57:17 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2012.04.23 17:06:34 | 000,006,817 | ---- | C] () -- C:\Windows\DiabUnin.dat

[2012.01.27 16:11:03 | 000,168,864 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe

[2011.12.21 17:54:55 | 000,000,620 | ---- | C] () -- C:\Windows\eReg.dat

[2011.09.28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat

[2011.09.19 15:03:40 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\rtvcvfw32.dll

[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

[2011.07.19 23:52:56 | 000,005,002 | ---- | C] () -- C:\ProgramData\kaevcwgh.slj

[2011.07.19 23:40:37 | 000,005,117 | ---- | C] () -- C:\ProgramData\hvcatrnw.tht

[2011.01.25 16:45:47 | 000,001,852 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\ImperatorProfile0.dat

[2010.04.12 21:20:19 | 000,000,040 | ---- | C] () -- C:\ProgramData\ra3.ini

[2010.02.20 22:12:15 | 000,000,096 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Local\fusioncache.dat

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== LOP Check ==========

 

[2011.06.29 19:38:06 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\.minecraft

[2012.05.06 20:46:49 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Alarmstufe Rot 3 Der Aufstand

[2010.03.28 14:13:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Bioshock2

[2010.08.12 21:47:10 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Blender Foundation

[2010.08.12 21:49:41 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\CB Model Pro

[2010.12.29 00:52:50 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command & Conquer 3 Kanes Rache

[2010.12.24 19:29:43 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command & Conquer 3 Tiberium Wars

[2010.02.03 20:22:17 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command and Conquer 4 Beta

[2013.06.17 17:02:44 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Dropbox

[2013.05.12 15:10:30 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoft

[2013.05.26 18:22:42 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\FileZilla

[2011.10.30 13:56:34 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Firefly Studios

[2011.11.29 12:21:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\fltk.org

[2012.03.12 09:30:17 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Foxit Software

[2010.12.25 22:30:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\FreeVideoConverter

[2011.02.04 23:28:15 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\GetRightToGo

[2010.08.13 19:26:40 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Leadertech

[2010.09.09 22:36:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\LolClient

[2012.05.24 11:16:58 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\LolClient2

[2011.11.22 21:40:13 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\MAXON

[2013.03.05 23:50:00 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Might & Magic Heroes VI

[2011.07.19 23:41:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\MOVAVI

[2010.01.11 21:13:01 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Mumble

[2012.01.15 20:54:10 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\NationRed

[2013.03.02 13:09:24 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Natural Selection 2

[2010.09.09 11:58:26 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Need for Speed World

[2011.03.11 16:57:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\nHancer

[2010.11.01 07:52:46 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\OpenOffice.org

[2012.01.22 19:21:36 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Opera

[2012.12.29 17:07:50 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Origin

[2013.03.08 08:58:46 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Rainmeter

[2010.05.03 21:32:13 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Red Alert 3

[2012.04.13 07:58:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\RotMG.Production

[2010.05.21 23:48:38 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Sports Interactive

[2012.12.04 19:36:38 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\TeamViewer

[2012.07.25 23:36:55 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Teeworlds

[2012.11.24 20:21:25 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Theta

[2013.06.17 23:09:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\TS3Client

[2012.11.06 00:50:36 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Ubisoft

[2012.09.30 12:52:39 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\wargaming.net

 
 ========== Purity Check ==========

 

 
 

< End of report >

Mit einem Junk Removal Tool log kann ich dir leider nicht dienen, da sich das Programm bei mir weigert zu starten.
Es blinkt für den Bruchteil einer Sekunde das cmd-Fenster auf und schließt sich dann sofort wieder.
Antivirenprog. war geschlossen und JRT wurde als Administrator gestartet

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches OTL log. Noch Probleme? :)

Hier ist das ESET log:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=c59d34d9170f4b449a0ee9140efcc4ed

# engine=14101

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2013-06-18 06:36:27

# local_time=2013-06-18 08:36:27 (+0100, Mitteleuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=774 16777213 85 91 372426 148290459 0 0

# compatibility_mode=5893 16776574 100 94 20395097 123210437 0 0

# scanned=523562

# found=0

# cleaned=0

# scan_time=18647

Code:

OTL logfile created on: 18.06.2013 23:06:28 - Run 3

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\xXBaseXx\Desktop

64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16614)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

7,99 Gb Total Physical Memory | 4,37 Gb Available Physical Memory | 54,72% Memory free

15,98 Gb Paging File | 12,17 Gb Available in Paging File | 76,15% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 931,41 Gb Total Space | 323,25 Gb Free Space | 34,71% Space Free | Partition Type: NTFS

 kl

Computer Name: XXBASEXX-PC | User Name: xXBaseXx | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2013.06.17 17:43:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe

PRC - [2013.06.14 13:12:34 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

PRC - [2013.05.30 18:58:58 | 000,144,384 | ---- | M] (Adobe Systems Inc.) -- C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.30\deploy\LolClient.exe

PRC - [2013.05.22 21:11:31 | 000,920,472 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe

PRC - [2013.05.09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe

PRC - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe

PRC - [2013.04.25 00:10:06 | 000,659,224 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech Gaming Software\Applets\LCDMedia.exe

PRC - [2013.04.01 01:44:47 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe

PRC - [2013.03.01 15:15:46 | 002,693,448 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.164\deploy\LoLLauncher.exe

PRC - [2013.03.01 15:13:08 | 001,300,816 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe

PRC - [2012.07.24 05:46:36 | 000,164,168 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSS.exe

PRC - [2012.07.24 05:46:34 | 000,405,832 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe

PRC - [2010.12.18 18:56:48 | 000,095,272 | ---- | M] (EnTech Taiwan) -- C:\Windows\SysWOW64\softLCP.exe

PRC - [2010.12.18 18:56:34 | 000,291,384 | ---- | M] (EnTech Taiwan) -- C:\Program Files (x86)\softOSD\softOSD.exe

PRC - [2010.11.20 14:17:56 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe

PRC - [2009.02.23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2013.06.14 13:12:34 | 016,033,160 | ---- | M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll

MOD - [2013.05.22 21:11:30 | 003,128,728 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

MOD - [2013.03.01 15:15:46 | 002,693,448 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.0.164\deploy\LoLLauncher.exe

MOD - [2013.03.01 15:13:08 | 001,300,816 | ---- | M] () -- C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe

MOD - [2012.07.24 05:46:36 | 000,164,168 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSS.exe

MOD - [2012.07.24 05:46:34 | 000,405,832 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe

MOD - [2012.07.21 08:44:58 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTMUI.dll

MOD - [2012.07.21 08:44:54 | 000,335,872 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTHAL.dll

MOD - [2012.07.21 08:44:38 | 000,225,280 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTCore.dll

MOD - [2012.07.21 08:44:30 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTUI.dll

MOD - [2012.07.21 08:44:22 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTFC.dll

MOD - [2012.06.04 18:23:18 | 000,122,880 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTSSHooks.dll

MOD - [2012.06.04 17:03:40 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTMUI.dll

MOD - [2012.06.04 17:02:42 | 000,147,456 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTUI.dll

MOD - [2012.06.04 17:02:34 | 000,061,440 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTFC.dll

MOD - [2011.04.30 17:04:54 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\RTTSH.dll

MOD - [2011.04.30 17:04:54 | 000,013,312 | ---- | M] () -- C:\Program Files (x86)\MSI Afterburner\Bundle\OSDServer\RTTSH.dll

MOD - [2009.08.26 06:29:28 | 000,150,016 | ---- | M] () -- C:\Windows\SysWOW64\OemSpiE.dll

MOD - [2009.03.26 15:46:42 | 000,148,480 | ---- | M] () -- C:\Windows\SysWOW64\APOMngr.DLL

MOD - [2009.02.06 19:52:24 | 000,073,728 | ---- | M] () -- C:\Windows\SysWOW64\CmdRtr.DLL

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2013.02.26 20:24:44 | 000,240,640 | ---- | M] (AMD) [Disabled | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)

SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV - [2013.06.14 13:12:34 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2013.06.07 00:06:24 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2013.05.22 21:11:31 | 000,117,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)

SRV - [2013.04.01 01:44:47 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)

SRV - [2012.08.10 12:42:54 | 000,150,464 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Futuremark\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)

SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2012.06.10 02:14:06 | 000,263,808 | ---- | M] (Josip Medved) [Disabled | Stopped] -- C:\Programme\Josip Medved\VHD Attach\VhdAttachService.exe -- (VhdAttach)

SRV - [2012.01.24 13:50:46 | 000,168,864 | ---- | M] () [Disabled | Stopped] -- C:\Programme\Common Files\WireHelpSvc.exe -- (WireHelpSvc)

SRV - [2011.12.08 18:21:47 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\MT6Licensing.exe -- (Creative Media Toolbox 6 Licensing Service)

SRV - [2011.12.08 18:17:48 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe -- (Creative ALchemy AL6 Licensing Service)

SRV - [2011.09.07 16:29:20 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe -- (Creative Audio Engine Licensing Service)

SRV - [2011.04.24 23:08:00 | 004,303,928 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)

SRV - [2011.02.28 10:16:38 | 000,011,776 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Dell\PowerNap\PowerNap.Service.exe -- (dell_power_nap_service)

SRV - [2011.01.10 14:49:20 | 000,014,848 | ---- | M] () [Disabled | Stopped] -- C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe -- (DokanMounter)

SRV - [2010.12.18 18:56:34 | 000,291,384 | ---- | M] (EnTech Taiwan) [Auto | Running] -- C:\Program Files (x86)\softOSD\softOSD.exe -- (softOSD)

SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2009.08.18 13:48:02 | 002,291,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)

SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009.02.23 12:43:54 | 000,307,200 | ---- | M] (Creative Technology Ltd) [Auto | Running] -- C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe -- (CTAudSvcService)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2013.05.09 10:59:07 | 001,025,808 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)

DRV:64bit: - [2013.05.09 10:59:07 | 000,378,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)

DRV:64bit: - [2013.05.09 10:59:07 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)

DRV:64bit: - [2013.05.09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)

DRV:64bit: - [2013.05.09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)

DRV:64bit: - [2013.05.09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)

DRV:64bit: - [2013.05.09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)

DRV:64bit: - [2013.05.09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV:64bit: - [2013.02.26 21:17:50 | 011,613,184 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)

DRV:64bit: - [2013.02.26 19:58:04 | 000,576,000 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)

DRV:64bit: - [2013.02.12 23:01:36 | 000,042,184 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss6.sys -- (taphss6)

DRV:64bit: - [2013.01.17 21:15:12 | 000,066,800 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGSHidFilt.Sys -- (LGSHidFilt)

DRV:64bit: - [2013.01.15 12:11:26 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)

DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2012.01.24 14:50:38 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ESLvnic.sys -- (ESLvnic1)

DRV:64bit: - [2012.01.24 13:50:38 | 000,147,472 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ESLWireACD.sys -- (ESLWireAC)

DRV:64bit: - [2011.07.26 19:49:12 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)

DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2011.01.15 18:21:04 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VClone.sys -- (VClone)

DRV:64bit: - [2011.01.10 14:51:40 | 000,120,408 | ---- | M] (Windows (R) Win 7 DDK provider) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\dokan.sys -- (Dokan)

DRV:64bit: - [2010.12.17 00:58:14 | 000,040,816 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\ElbyCDIO.sys -- (ElbyCDIO)

DRV:64bit: - [2010.11.20 15:34:04 | 000,360,832 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcvmm.sys -- (vpcvmm)

DRV:64bit: - [2010.11.20 15:34:04 | 000,194,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpchbus.sys -- (vpcbus)

DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.20 13:35:34 | 000,095,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\vpcusb.sys -- (vpcusb)

DRV:64bit: - [2010.11.20 13:35:22 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\vpcnfltr.sys -- (vpcnfltr)

DRV:64bit: - [2010.05.28 13:04:52 | 000,017,456 | ---- | M] (Secunia) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\psi_mf.sys -- (PSI)

DRV:64bit: - [2010.03.04 13:43:00 | 000,346,144 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2010.02.15 23:21:32 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)

DRV:64bit: - [2010.02.15 23:21:31 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)

DRV:64bit: - [2009.11.24 02:38:00 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)

DRV:64bit: - [2009.11.24 02:37:50 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)

DRV:64bit: - [2009.11.18 08:12:00 | 000,032,344 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\MBfilt64.sys -- (MBfilt)

DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.06.17 09:54:46 | 000,040,976 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt)

DRV:64bit: - [2009.06.17 09:54:30 | 000,057,872 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt)

DRV:64bit: - [2009.06.17 09:54:22 | 000,055,312 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt)

DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.05.06 03:34:52 | 000,639,512 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\t3.sys -- (t3)

DRV:64bit: - [2009.02.03 17:46:14 | 000,077,952 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfsync04.sys -- (sfsync04)

DRV:64bit: - [2009.02.03 17:37:50 | 000,075,384 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01)

DRV:64bit: - [2007.06.25 10:42:22 | 000,108,072 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s117bus.sys -- (s117bus)

DRV:64bit: - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\se64a.sys -- (se64a)

DRV:64bit: - [2006.09.30 11:36:14 | 000,013,008 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\pstrip64.sys -- (PStrip64)

DRV:64bit: - [2006.06.14 16:58:10 | 000,014,192 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02)

DRV - [2012.07.24 05:46:34 | 000,010,568 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\MSI Afterburner\RTCore64.sys -- (RTCore64)

DRV - [2010.10.22 10:37:36 | 000,014,136 | ---- | M] (MSI) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\NTIOLib_X64.sys -- (NTIOLib_1_0_4)

DRV - [2010.05.10 10:44:40 | 000,033,592 | ---- | M] (Your Corporation) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\MSI\Live Update 5\msibios64_100507.sys -- (MSI_MSIBIOS_010507)

DRV - [2010.01.29 11:40:16 | 000,115,600 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive)

DRV - [2009.12.31 14:00:46 | 000,019,952 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys -- (RivaTuner64)

DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

DRV - [2007.05.03 18:19:38 | 000,014,032 | ---- | M] (EnTech Taiwan) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\se64a.sys -- (se64a)

DRV - [2004.12.30 23:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)

DRV - [2004.05.13 15:00:04 | 000,111,808 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prohlp02.sys -- (prohlp02)

DRV - [2004.05.13 13:19:36 | 000,079,488 | ---- | M] (Protection Technology) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\prodrv06.sys -- (prodrv06)

DRV - [2003.12.01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\sfhlp01.sys -- (sfhlp01)

DRV - [2003.09.06 14:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\SysWOW64\drivers\prosync1.sys -- (prosync1)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = 

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.msn.com/?ocid=EIE9HP&PC=UP50

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9C C2 45 B4 AA D0 CC 01  [binary data]

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledAddons: npretoxlive%40live.heroesandgenerals.com:1.0.3.5

FF - prefs.js..extensions.enabledAddons: client%40anonymox.net:1.0.2

FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20130515

FF - prefs.js..extensions.enabledAddons: %7B73a6fe31-595d-460b-a920-fcc0f8843232%7D:2.6.6.2

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0

FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3

FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.8

FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908

FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20

FF - prefs.js..extensions.enabledItems: Strata40@SpewBoy.au:0.6.2

FF - prefs.js..network.proxy.http: "127.0.0.1"

FF - prefs.js..network.proxy.http_port: 5555

FF - prefs.js..network.proxy.no_proxies_on: ""

FF - prefs.js..network.proxy.type: 4

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_224.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll ()

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar: C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\Sonar\npesnsonar.dll (ESN AB)

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.0: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.3: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.3\npesnsonar.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch: C:\Program Files (x86)\BF3 Alpha Trial Web Plugins\npesnlaunch.dll (ESN AB)

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.104.0: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.116.0: C:\Program Files (x86)\Battlelog Web Plugins\1.116.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.138.0: C:\Program Files (x86)\Battlelog Web Plugins\1.138.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.96.0: C:\Program Files (x86)\Battlelog Web Plugins\1.96.0\npesnlaunch.dll File not found

FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.3: C:\Program Files (x86)\Battlelog Web Plugins\2.1.3\npesnlaunch.dll (ESN Social Software AB)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.4.1: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.4.1: C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@live.heroesandgenerals.com/npretox: C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)

FF - HKLM\Software\MozillaPlugins\@ngm.nexoneu.com/NxGame: C:\ProgramData\NexonEU\NGM\npNxGameeu.dll (Nexon)

FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.12.30 06:25:00 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.06.14 00:24:04 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.05.22 21:09:41 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2013.05.22 21:09:41 | 000,000,000 | ---D | M]

 

[2009.12.31 02:00:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Extensions

[2013.05.31 20:11:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions

[2013.05.17 07:42:10 | 000,000,000 | ---D | M] (WOT) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}

[2011.03.15 14:19:35 | 000,000,000 | ---D | M] (Battlefield Play4Free) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\battlefieldplay4free@ea.com

[2013.04.06 14:11:20 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\ich@maltegoetz.de

[2012.07.27 22:38:34 | 000,000,000 | ---D | M] (HNG downloader/starter (live)) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\npretoxlive@live.heroesandgenerals.com

[2010.04.21 20:38:39 | 000,000,000 | ---D | M] ("Strata40") -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au

[2010.04.21 20:38:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\Firefox\Profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\extensions

[2013.05.07 20:07:51 | 000,363,920 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\client@anonymox.net.xpi

[2013.05.31 20:11:34 | 000,699,920 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\jid1-qQSMEVsYTOjgYA@jetpack.xpi

[2013.05.26 11:32:06 | 000,534,261 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi

[2013.05.08 20:07:53 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

[2010.01.08 15:22:24 | 000,001,580 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\xpinstall\xpinstallConfirm.css

[2010.01.09 03:58:54 | 000,001,423 | ---- | M] () (No name found) -- C:\Users\xXBaseXx\AppData\Roaming\mozilla\firefox\profiles\kp8852w0.default\extensions\Strata40@SpewBoy.au\chrome\mozapps\xpinstall\xpinstallItemGeneric.png

[2013.05.22 21:11:32 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions

[2013.05.22 21:11:32 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

[2011.11.06 13:40:16 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll

 

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)

O3:64bit: - HKLM\..\Toolbar: (avast! Online Security) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O3 - HKLM\..\Toolbar: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O4:64bit: - HKLM..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE File not found

O4:64bit: - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)

O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [SPIRunE] Rundll32 SPIRunE.dll,RunDLLEntry File not found

O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found

O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found

O8 - Extra context menu item: Free YouTube Download - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm File not found

O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000006 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)

O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)

O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)

O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)

O16:64bit: - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)

O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)

O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)

O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.4.1)

O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab (Creative Software AutoUpdate Support Package 2)

O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab (Creative Software AutoUpdate 2)

O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/110926/CTPID.cab (Creative Software AutoUpdate Support Package)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{61AE6971-47C3-47E4-8E0C-28539E7B6CF9}: NameServer = 8.26.56.26,156.154.70.22

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{69B94DD0-3985-434A-8453-0D943E2FAA64}: NameServer = 62.109.123.196 213.191.74.18

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8BED4635-8D6C-46D0-AB8E-BD1538073031}: NameServer = 8.26.56.26,156.154.70.22

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18:64bit: - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18:64bit: - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18:64bit: - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll File not found

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) -  File not found

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found

O20 - HKLM Winlogon: Shell - (explorer.exe) -  File not found

O20 - HKLM Winlogon: UserInit - (userinit.exe) -  File not found

O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -  File not found

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O22:64bit: - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)

O29:64bit: - HKLM SecurityProviders - (credssp.dll) -  File not found

O29 - HKLM SecurityProviders - (credssp.dll) -  File not found

O32 - HKLM CDRom: AutoRun - 1

O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell - "" = AutoRun

O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell\AutoRun\command - "" = F:\autorun.exe

O33 - MountPoints2\{9488151c-1e2d-11df-8422-002421eecdd5}\Shell\setup\command - "" = F:\setup.exe

O33 - MountPoints2\{ba2b95b6-f317-11df-83a7-a2ffbd12294c}\Shell - "" = AutoRun

O33 - MountPoints2\{ba2b95b6-f317-11df-83a7-a2ffbd12294c}\Shell\AutoRun\command - "" = H:\setup.exe

O33 - MountPoints2\{fffd9228-f59d-11de-9ed3-806e6f6e6963}\Shell - "" = AutoRun

O33 - MountPoints2\{fffd9228-f59d-11de-9ed3-806e6f6e6963}\Shell\AutoRun\command - "" = D:\setup.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013.06.18 15:23:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET

[2013.06.18 15:20:42 | 002,347,384 | ---- | C] (ESET) -- C:\Users\xXBaseXx\Desktop\esetsmartinstaller_enu.exe

[2013.06.18 12:26:02 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Documents\RIFT

[2013.06.18 12:16:29 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\RIFT

[2013.06.18 12:16:29 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RIFT

[2013.06.18 12:16:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\RIFT

[2013.06.18 08:53:18 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\JRT

[2013.06.18 08:52:09 | 000,545,954 | ---- | C] (Oleg N. Scherbakov) -- C:\Users\xXBaseXx\Desktop\JRT.exe

[2013.06.18 08:27:47 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\temp

[2013.06.18 08:27:47 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\erunt

[2013.06.18 08:23:01 | 000,000,000 | ---D | C] -- C:\JRT

[2013.06.17 22:15:11 | 000,000,000 | ---D | C] -- C:\FRST

[2013.06.17 22:14:48 | 001,926,844 | ---- | C] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST64.exe

[2013.06.17 22:13:57 | 001,365,333 | ---- | C] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST.exe

[2013.06.17 17:45:28 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Desktop\Neuer Ordner (5)

[2013.06.17 17:43:01 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe

[2013.06.05 20:58:28 | 000,000,000 | R--D | C] -- C:\Users\xXBaseXx\Dropbox

[2013.06.05 20:57:22 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

[2013.06.05 20:54:56 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\Dropbox

[2013.05.28 19:32:33 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\Documents\CPY_SAVES

[2013.05.27 16:23:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II

[2013.05.25 13:40:53 | 000,000,000 | ---D | C] -- C:\Users\xXBaseXx\AppData\Roaming\FileZilla

[2013.05.25 13:40:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client

[2013.05.25 13:40:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FileZilla FTP Client

[2013.05.25 12:17:39 | 008,043,008 | ---- | C] (Dxtory Software) -- C:\Windows\SysNative\DxtoryCodec.dll

[2013.05.22 21:08:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox

[2013.05.22 00:19:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation

[2013.05.21 19:21:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Steam

[2013.05.21 18:47:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Resident Evil 6

[2013.05.21 01:32:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Metro Last Light

[9 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2013.06.18 22:55:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2013.06.18 16:11:27 | 001,447,763 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\1371563650252.gif

[2013.06.18 15:58:57 | 000,765,413 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\1371561552323.gif

[2013.06.18 15:21:27 | 000,890,839 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\SecurityCheck.exe

[2013.06.18 15:20:44 | 002,347,384 | ---- | M] (ESET) -- C:\Users\xXBaseXx\Desktop\esetsmartinstaller_enu.exe

[2013.06.18 12:16:30 | 000,000,908 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\RIFT.lnk

[2013.06.18 10:51:05 | 000,017,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013.06.18 10:51:05 | 000,017,168 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013.06.18 10:45:58 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl

[2013.06.18 10:45:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013.06.18 10:45:45 | 2140,495,871 | -HS- | M] () -- C:\hiberfil.sys

[2013.06.18 08:52:10 | 000,545,954 | ---- | M] (Oleg N. Scherbakov) -- C:\Users\xXBaseXx\Desktop\JRT.exe

[2013.06.18 08:17:37 | 000,648,201 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe

[2013.06.17 22:14:59 | 001,926,844 | ---- | M] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST64.exe

[2013.06.17 22:14:04 | 001,365,333 | ---- | M] (Farbar) -- C:\Users\xXBaseXx\Desktop\FRST.exe

[2013.06.17 21:56:22 | 000,057,854 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\Logs.rar

[2013.06.17 17:45:17 | 000,000,000 | ---- | M] () -- C:\Users\xXBaseXx\defogger_reenable

[2013.06.17 17:44:34 | 000,377,856 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe

[2013.06.17 17:43:01 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\xXBaseXx\Desktop\OTL.exe

[2013.06.17 17:41:22 | 000,050,477 | ---- | M] () -- C:\Users\xXBaseXx\Desktop\Defogger.exe

[2013.06.14 03:04:41 | 001,622,922 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2013.06.14 03:04:41 | 000,709,210 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2013.06.14 03:04:41 | 000,661,492 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013.06.14 03:04:41 | 000,153,562 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2013.06.14 03:04:41 | 000,125,682 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013.06.14 03:04:33 | 001,622,922 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013.06.14 00:24:05 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt

[9 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2013.06.18 16:11:27 | 001,447,763 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\1371563650252.gif

[2013.06.18 15:58:57 | 000,765,413 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\1371561552323.gif

[2013.06.18 15:21:21 | 000,890,839 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\SecurityCheck.exe

[2013.06.18 12:16:30 | 000,000,908 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\RIFT.lnk

[2013.06.18 08:17:37 | 000,648,201 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\adwcleaner2303.exe

[2013.06.17 21:56:22 | 000,057,854 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\Logs.rar

[2013.06.17 17:45:17 | 000,000,000 | ---- | C] () -- C:\Users\xXBaseXx\defogger_reenable

[2013.06.17 17:44:34 | 000,377,856 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\gmer_2.1.19163.exe

[2013.06.17 17:41:22 | 000,050,477 | ---- | C] () -- C:\Users\xXBaseXx\Desktop\Defogger.exe

[2013.05.21 01:48:26 | 000,000,856 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Metro Last Light.lnk

[2013.04.01 01:45:13 | 000,291,088 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe

[2013.04.01 01:44:47 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe

[2013.03.27 21:11:29 | 000,015,522 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bk!

[2013.03.27 21:11:19 | 000,001,886 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bko

[2013.03.11 18:40:25 | 000,015,739 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.bak

[2013.03.11 18:33:36 | 000,015,741 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\PStrip.ini

[2013.02.26 20:25:22 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat

[2013.02.26 20:25:22 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat

[2013.01.18 21:43:53 | 000,037,999 | ---- | C] () -- C:\Windows\DIIUnin.dat

[2012.11.27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll

[2012.11.19 22:00:00 | 003,123,272 | R--- | C] () -- C:\Windows\SysWow64\pbsvc.exe

[2012.10.07 00:18:46 | 000,000,023 | ---- | C] () -- C:\Windows\BlendSettings.ini

[2012.10.06 16:02:55 | 000,877,747 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Local\Tempmusic.ogg

[2012.09.15 11:31:48 | 000,000,061 | ---- | C] () -- C:\Windows\sbwin.ini

[2012.09.14 21:57:17 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin

[2012.04.23 17:06:34 | 000,006,817 | ---- | C] () -- C:\Windows\DiabUnin.dat

[2012.01.27 16:11:03 | 000,168,864 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe

[2011.12.21 17:54:55 | 000,000,620 | ---- | C] () -- C:\Windows\eReg.dat

[2011.09.28 18:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat

[2011.09.19 15:03:40 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\rtvcvfw32.dll

[2011.09.13 00:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat

[2011.07.19 23:52:56 | 000,005,002 | ---- | C] () -- C:\ProgramData\kaevcwgh.slj

[2011.07.19 23:40:37 | 000,005,117 | ---- | C] () -- C:\ProgramData\hvcatrnw.tht

[2011.01.25 16:45:47 | 000,001,852 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Roaming\ImperatorProfile0.dat

[2010.04.12 21:20:19 | 000,000,040 | ---- | C] () -- C:\ProgramData\ra3.ini

[2010.02.20 22:12:15 | 000,000,096 | ---- | C] () -- C:\Users\xXBaseXx\AppData\Local\fusioncache.dat

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== LOP Check ==========

 

[2011.06.29 19:38:06 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\.minecraft

[2012.05.06 20:46:49 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Alarmstufe Rot 3 Der Aufstand

[2010.03.28 14:13:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Bioshock2

[2010.08.12 21:47:10 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Blender Foundation

[2010.08.12 21:49:41 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\CB Model Pro

[2010.12.29 00:52:50 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command & Conquer 3 Kanes Rache

[2010.12.24 19:29:43 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command & Conquer 3 Tiberium Wars

[2010.02.03 20:22:17 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Command and Conquer 4 Beta

[2013.06.17 17:02:44 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Dropbox

[2013.05.12 15:10:30 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\DVDVideoSoft

[2013.05.26 18:22:42 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\FileZilla

[2011.10.30 13:56:34 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Firefly Studios

[2011.11.29 12:21:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\fltk.org

[2012.03.12 09:30:17 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Foxit Software

[2010.12.25 22:30:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\FreeVideoConverter

[2011.02.04 23:28:15 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\GetRightToGo

[2010.08.13 19:26:40 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Leadertech

[2010.09.09 22:36:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\LolClient

[2012.05.24 11:16:58 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\LolClient2

[2011.11.22 21:40:13 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\MAXON

[2013.03.05 23:50:00 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Might & Magic Heroes VI

[2011.07.19 23:41:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\MOVAVI

[2010.01.11 21:13:01 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Mumble

[2012.01.15 20:54:10 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\NationRed

[2013.03.02 13:09:24 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Natural Selection 2

[2010.09.09 11:58:26 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Need for Speed World

[2011.03.11 16:57:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\nHancer

[2010.11.01 07:52:46 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\OpenOffice.org

[2012.01.22 19:21:36 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Opera

[2012.12.29 17:07:50 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Origin

[2013.03.08 08:58:46 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Rainmeter

[2010.05.03 21:32:13 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Red Alert 3

[2013.06.18 12:34:19 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\RIFT

[2012.04.13 07:58:02 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\RotMG.Production

[2010.05.21 23:48:38 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Sports Interactive

[2012.12.04 19:36:38 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\TeamViewer

[2012.07.25 23:36:55 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Teeworlds

[2012.11.24 20:21:25 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Theta

[2013.06.18 23:19:14 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\TS3Client

[2012.11.06 00:50:36 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\Ubisoft

[2012.09.30 12:52:39 | 000,000,000 | ---D | M] -- C:\Users\xXBaseXx\AppData\Roaming\wargaming.net

 
 ========== Purity Check ==========

 

 
 

< End of report >

Mit einem Security Check log kann ich dir erneut nicht dienen.
Irgendwie scheint der Rechner Programme nicht zu mögen, die mit dem DOS-Fenster arbeiten. Er kennt angeblich die ganzen Befehle nicht, die das Prog. in die DOS-Box eingibt...
Wie dem auch sei, die Umleitung auf die Scam page findet nicht mehr statt und der PC stürzt auch nicht mehr ab. Sieht soweit gut aus.
Bis zu diesem Punkt muss ich dir schon mal vielmals danken. Ohne dich hätte ich das System
wohl doch platt gemacht.

Fertig :)

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Hier noch ein paar Tipps zur Absicherung deines Systems.

Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.

Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
Windows Updates
- Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
- Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
Gehe sicher das die automatischen Updates aktiviert sind.
Software Updates
Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.

Anti- Viren Software

Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.

Zusätzlicher Schutz

MalwareBytes Anti Malware
Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
Ein Tutorial zur Verwendung findest Du hier.
WinPatrol
Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.

Sicheres Browsen

SpywareBlaster
Eine kurze Einführung findest du Hier
MVPs hosts file
Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
WOT (Web of trust)
Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.

Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.

Opera
Mozilla Firefox.
- Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
- NoScript
  Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
- AdblockPlus
  Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
  Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )

Don'ts

Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe

Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.

Alles erledigt, alles super!
Ich habe im Feedbackbereich des Forums Kritik zu dir abgegeben.
Bin mehr als Zufrieden!

Danke nochmal,

MfG

BaseLee